Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 239 of 437.
- CVE-2022-41882 Nextcloud Desktop vulnerable to code injection via malicious link
- CVE-2022-41881 HAProxyMessageDecoder Stack Exhaustion DoS
- CVE-2022-41880 ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow
- CVE-2022-4188 Security feature bypass in Chrome
- CVE-2022-41879 Parse Server subject to Prototype pollution via Cloud Code Webhooks
- CVE-2022-41878 Parse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers
- CVE-2022-41877 Missing input length validation in `drive` channel in FreeRDP
- CVE-2022-41876 ezplatform-graphql GraphQL queries can expose password hashes
- CVE-2022-41875 Remote Code Execution in Optica
- CVE-2022-41874 Tauri Filesystem Scope can be Partially Bypassed
- CVE-2022-41873 Out-of-bounds read and write in BLE L2CAP module
- CVE-2022-41871 Command injection in SEPPmail
- CVE-2022-41870 Command injection in innovaphone:innovaphone firmware
- CVE-2022-4187 Security feature bypass in Chrome
- CVE-2022-41862 Information disclosure in postgresql
- CVE-2022-41861 Denial of service in freeradius
- CVE-2022-41860 Null dereference in freeradius
- CVE-2022-4186 Security feature bypass in Chrome
- CVE-2022-41859 Information disclosure in freeradius
- CVE-2022-41858 Null dereference in Linux kernel
- CVE-2022-41854 Stack Overflow in Snakeyaml
- CVE-2022-41853 Remote code execution in HyperSQL DataBase
- CVE-2022-41851 Memory corruption in JTTK
- CVE-2022-41850 Use after free in debian:debian linux
- CVE-2022-4185 Other in Chrome
- CVE-2022-41849 Use after free in debian:debian linux
- CVE-2022-41848 Use after free in linux:linux kernel
- CVE-2022-41847 Denial of service in axiosys:bento4
- CVE-2022-41846 Denial of service in axiosys:bento4
- CVE-2022-41845 Denial of service in axiosys:bento4
- CVE-2022-41844 Memory corruption in xpdfreader:xpdf
- CVE-2022-41843 Null dereference in xpdfreader:xpdf
- CVE-2022-41842 Memory corruption in xpdfreader:xpdf
- CVE-2022-41841 Null dereference in axiosys:bento4
- CVE-2022-41840 WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability
- CVE-2022-4184 Security feature bypass in Chrome
- CVE-2022-41839 WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerability
- CVE-2022-41838 Memory corruption in OpenImageIO
- CVE-2022-41837 Memory corruption in OpenImageIO
- CVE-2022-41836 BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836
- CVE-2022-41835 F5OS vulnerability CVE-2022-41835
- CVE-2022-41833 BIG-IP iRule vulnerability CVE-2022-41833
- CVE-2022-41832 BIG-IP SIP vulnerability CVE-2022-41832
- CVE-2022-41831 WordPress Glossary Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-41830 Cross-site scripting in Kyocera Document Solutions MFPs and printers
- CVE-2022-4183 Security feature bypass in Chrome
- CVE-2022-41828 com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution
- CVE-2022-4182 Security feature bypass in Chrome
- CVE-2022-41814 Potential XSS in history view
- CVE-2022-41813 BIG-IP PEM and AFM TMUI, TMSH and iControl vulnerability CVE-2022-41813
- CVE-2022-4181 Use after free in Chrome
- CVE-2022-41808 Memory corruption in Intel QAT Driver for Linux
- CVE-2022-41807 Missing authorization in Kyocera Document Solutions MFPs and printers
- CVE-2022-41806 BIG-IP AFM NAT64 Policy Vulnerability CVE-2022-41806
- CVE-2022-41805 WordPress Booster for WooCommerce plugin <= 5.6.6 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-41804 Privilege escalation in Intel(R) Xeon(R) Processors
- CVE-2022-41802 Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.
- CVE-2022-41801 Denial of service in Intel(R) Connect M Android application
- CVE-2022-41800 Appliance mode iControl REST vulnerability
- CVE-2022-4180 Use after free in Chrome
- CVE-2022-41799 Missing authorization in GROWI v5 series and v4 series
- CVE-2022-41798 Auth bypass in Kyocera Document Solutions MFPs and printers
- CVE-2022-41797 Open redirect in Lemon8 App for Android and Lemon8 App for iOS
- CVE-2022-41796 Other in Content Transfer (for Windows)
- CVE-2022-41794 Memory corruption in OpenImageIO
- CVE-2022-41793 Open Babel has out-of-bounds write in CSR PadString (title field)
- CVE-2022-41791 WordPress ProfileGrid plugin <= 5.1.6 - Auth. CSV Injection vulnerability
- CVE-2022-41790 WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control
- CVE-2022-4179 Use after free in Chrome
- CVE-2022-41789 Potential XSS on default page header
- CVE-2022-41788 WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability
- CVE-2022-41787 BIG-IP DNS Express vulnerability CVE-2022-41787
- CVE-2022-41786 WordPress WP Job Portal Plugin <= 2.0.1 is vulnerable to Broken Access Control
- CVE-2022-41785 WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-41784 Privilege escalation in Intel(R) OFU software
- CVE-2022-41783 Denial of service in TP-Link RE300 V1
- CVE-2022-41781 WordPress Permalink Manager Lite plugin <= 2.2.20 - Broken Access Control vulnerability
- CVE-2022-41780 F5OS CLI vulnerability CVE-2022-41780
- CVE-2022-4178 Use after free in Chrome
- CVE-2022-41779 Deserialization in InfraSuite Device Master
- CVE-2022-41778 Deserialization in InfraSuite Device Master
- CVE-2022-41777 nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit
- CVE-2022-41776 Missing authorization in InfraSuite Device Master
- CVE-2022-41775 Delta Electronics DIAEnergie SQL Injection
- CVE-2022-41773 Delta Electronics DIAEnergie
- CVE-2022-41772 Path traversal in InfraSuite Device Master
- CVE-2022-41771 Misconfiguration in Intel(R) QAT drivers for Windows
- CVE-2022-41770 BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770
- CVE-2022-4177 Use after free in Chrome
- CVE-2022-41769 Privilege escalation in Intel(R) Connect M Android application
- CVE-2022-41767 Information disclosure in mediawiki:mediawiki
- CVE-2022-41766 Information disclosure in mediawiki:mediawiki
- CVE-2022-41765 Information disclosure in mediawiki:mediawiki
- CVE-2022-41763 Code injection in nokia:access management system
- CVE-2022-41762 Cross-site scripting in nokia:network functions manager for transport
- CVE-2022-41761 Path traversal in nokia:network functions manager for transport
- CVE-2022-41760 Path traversal in nokia:network functions manager for transport
- CVE-2022-4176 Memory corruption in Chrome
- CVE-2022-41757 Use after free in arm:valhall gpu kernel driver
- CVE-2022-41751 Command injection in debian:debian linux