Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 238 of 437.
- CVE-2022-41974 Privilege escalation in debian:debian linux
- CVE-2022-41973 Privilege escalation in debian:debian linux
- CVE-2022-41972 Contiki-NG contains NULL Pointer Dereference in BLE L2CAP module
- CVE-2022-41971 Nextcloud Talk guests can continue to receive video streams from call after being removed from a conversation
- CVE-2022-41970 Nextcloud Server's disabled download shares still allow download through preview images
- CVE-2022-4197 Sliderby10Web < 1.2.53 - Admin+ Stored XSS
- CVE-2022-41969 Nextcloud Server has no password length limit when creating a user as an administrator
- CVE-2022-41968 Nextcloud Server's calendar name length not validated before writing to database
- CVE-2022-41967 Improper Restriction of XML External Entity Reference in Dragonfly
- CVE-2022-41966 XStream Denial of Service via stack overflow
- CVE-2022-41965 Opencast Authenticated OpenRedirect Vulnerability
- CVE-2022-41964 BigBlueButton contains Response leaks in anonymous polls
- CVE-2022-41963 BigBlueButton contains Improper Preservation of Permissions for whiteboard
- CVE-2022-41962 BigBlueButton contains Incorrect Authorization for setting emoji status
- CVE-2022-41961 BigBlueButton subject to Ineffective user bans
- CVE-2022-41960 BigBlueButton contains DoS via failed authToken validation
- CVE-2022-4196 Multi Step Form < 1.7.8 - Admin+ Stored XSS
- CVE-2022-41958 Deserialization Vulnerability by yaml config input in super-xray
- CVE-2022-41957 muhammara vulnerable to Unchecked Return Value to NULL Pointer Dereference
- CVE-2022-41956 Autolab is vulnerable to file disclosure via remote handin feature
- CVE-2022-41955 Autolab is vulnerable to remote code execution (RCE) via MOSS functionality
- CVE-2022-41954 Temporary File Information Disclosure Vulnerability
- CVE-2022-41953 Git clone remote code execution vulnerability in git-for-windows
- CVE-2022-41952 Uncontrolled Resource Consumption in Matrix Synapse
- CVE-2022-41951 OroPlatform vulnerable to path traversal during temporary file manipulations
- CVE-2022-41950 Privilege Escalation Vulnerability by wrong chmod param
- CVE-2022-4195 Security feature bypass in Chrome
- CVE-2022-41949 Semi-blind Server-Side Request Forgery in dhis2-core
- CVE-2022-41948 Privilege Chaining with the user admin role in dhis2-core
- CVE-2022-41947 Cross-site Scripting with user-uploaded files in dhis2-core
- CVE-2022-41946 TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc
- CVE-2022-41945 Remote Code Execution (RCE) vulnerability in super-xray via URL input
- CVE-2022-41944 Discourse users can see notifications for topics they no longer have access to
- CVE-2022-41943 Incorrect default permissions found in Sourcegraph
- CVE-2022-41942 Sourcegraph vulnerable to Comand Injection via gitserver
- CVE-2022-41941 glpi contains XSS Stored inside Standard Interface Help Link href attribute
- CVE-2022-41940 Uncaught exception in engine.io
- CVE-2022-4194 Use after free in Chrome
- CVE-2022-41939 Credential exposure when running third-party builders in knative/func
- CVE-2022-41938 Cross site scripting vulnerability with discussion titles in flarum
- CVE-2022-41937 Missing Authorization in XWiki Platform
- CVE-2022-41936 Exposure of Private Personal Information to an Unauthorized Actor in xwiki-platform-rest-server
- CVE-2022-41935 Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
- CVE-2022-41934 Improper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-menu-ui
- CVE-2022-41933 Plaintext storage of password in org.xwiki.platform:xwiki-platform-security-authentication-default
- CVE-2022-41932 Creation of new database tables through login form on PostgreSQL
- CVE-2022-41931 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui
- CVE-2022-41930 org.xwiki.platform:xwiki-platform-user-profile-ui missing authorization to enable or disable users
- CVE-2022-4193 Security feature bypass in Chrome
- CVE-2022-41929 Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore
- CVE-2022-41928 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
- CVE-2022-41927 XWiki Platform vulnerable to Cross-Site Request Forgery (CSRF) allowing to delete or rename tags
- CVE-2022-41926 Nextcloud Talk Android broadcast incorrect permission handling
- CVE-2022-41925 Tailscale daemon is vulnerable to information disclosure via CSRF
- CVE-2022-41924 Tailscale Windows daemon is vulnerable to RCE via CSRF
- CVE-2022-41923 Grails Spring Security Core plugin vulnerable to privilege escalation
- CVE-2022-41922 Prevent RCE when deserializing untrusted user input
- CVE-2022-41921 Discourse chat messages should have a maximum character limit
- CVE-2022-41920 Zip slip in Lancet
- CVE-2022-4192 Use after free in Chrome
- CVE-2022-41919 Fastify vulnerable to Cross-Site Request Forgery (CSRF) attack via incorrect content type
- CVE-2022-41918 Issue with fine-grained access control of indices backing data streams
- CVE-2022-41917 Incorrect Error Handling Allowed Partial File Reads Over REST API in OpenSearch
- CVE-2022-41916 Read one byte past a buffer when normalizing Unicode
- CVE-2022-41915 Netty vulnerable to HTTP Response splitting from assigning header value iterator
- CVE-2022-41914 Non-constant-time SCIM token comparison in Zulip Server
- CVE-2022-41913 Discourse-calendar exposes members of hidden groups
- CVE-2022-41912 crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements
- CVE-2022-41911 Invalid char to bool conversion when printing a tensor in Tensorflow
- CVE-2022-41910 Heap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflow
- CVE-2022-4191 Use after free in Chrome
- CVE-2022-41909 Segfault in `CompositeTensorVariantToComponents` in Tensorflow
- CVE-2022-41908 `CHECK` fail via inputs in `PyFunc` in Tensorflow
- CVE-2022-41907 Overflow in `ResizeNearestNeighborGrad` in Tensorflow
- CVE-2022-41906 OpenSearch Notifications is vulnerable to Server-Side Request Forgery (SSRF)
- CVE-2022-41905 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled
- CVE-2022-41904 Element iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessions
- CVE-2022-41903 Integer overflow in `git archive`, `git log --format` leading to RCE in git
- CVE-2022-41902 Out of bounds write in grappler in Tensorflow
- CVE-2022-41901 `CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow
- CVE-2022-41900 FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow
- CVE-2022-4190 Security feature bypass in Chrome
- CVE-2022-41899 `CHECK` fail via inputs in `SdcaOptimizer` in Tensorflow
- CVE-2022-41898 `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow
- CVE-2022-41897 `FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow
- CVE-2022-41896 `tf.raw_ops.Mfcc` crashes in Tensorflow
- CVE-2022-41895 `MirrorPadGrad` heap out of bounds read in Tensorflow
- CVE-2022-41894 Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
- CVE-2022-41893 `CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflow
- CVE-2022-41892 Arches vulnerable to SQL Injection
- CVE-2022-41891 Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow
- CVE-2022-41890 `CHECK` fail in `BCast` overflow in Tensorflow
- CVE-2022-4189 Security feature bypass in Chrome
- CVE-2022-41889 Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow
- CVE-2022-41888 Unckecked rank size in `tf.image.generate_bounding_box_proposals` in Tensorflow
- CVE-2022-41887 Overflow in `tf.keras.losses.poisson` in Tensorflow
- CVE-2022-41886 Overflow in `ImageProjectiveTransformV2` in Tensorflow
- CVE-2022-41885 Overflow in `FusedResizeAndPadConv2D` in Tensorflow
- CVE-2022-41884 Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow
- CVE-2022-41883 Out of bounds segmentation fault due to unequal op inputs in Tensorflow