Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 240 of 437.
- CVE-2022-4175 Use after free in Chrome
- CVE-2022-41749 Privilege escalation in Trend Micro Apex One
- CVE-2022-41748 Misconfiguration in Trend Micro Apex One
- CVE-2022-41747 Privilege escalation in Trend Micro Apex One
- CVE-2022-41746 Privilege escalation in Trend Micro Apex One
- CVE-2022-41745 Memory corruption in Trend Micro Apex One
- CVE-2022-41744 Race condition in Trend Micro Apex One
- CVE-2022-41743 NGINX ngx_http_hls_module vulnerability CVE-2022-41743
- CVE-2022-41742 NGINX ngx_http_mp4_module vulnerability CVE-2022-41742
- CVE-2022-41741 NGINX ngx_http_mp4_module vulnerability CVE-2022-41741
- CVE-2022-41740 IBM Robotic Process Automation information disclosure
- CVE-2022-4174 Memory corruption in Chrome
- CVE-2022-41739 IBM Spectrum Scale privilege escalation
- CVE-2022-41738 IBM Spectrum Scale security bypass
- CVE-2022-41737 IBM Spectrum Scale security bypass
- CVE-2022-41736 IBM Spectrum Scale Container Native Storage Access privilege escalation
- CVE-2022-41735 IBM Business Process Manager cross-site scripting
- CVE-2022-41734 IBM Maximo Asset Management information disclosure
- CVE-2022-41733 IBM InfoSphere Information Server denial of service
- CVE-2022-41732 IBM Maximo information disclosure
- CVE-2022-41731 IBM Watson Knowledge Catalog on Cloud Pak SQL injection
- CVE-2022-4173 Avast and AVG Antivirus for Windows vulnerable to Privilege Escalation
- CVE-2022-41727 Denial of service via crafted TIFF image in golang.org/x/image/tiff
- CVE-2022-41725 Excessive resource consumption in mime/multipart
- CVE-2022-41724 Panic on large handshake records in crypto/tls
- CVE-2022-41723 Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
- CVE-2022-41722 Path traversal on Windows in path/filepath
- CVE-2022-41721 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c
- CVE-2022-41720 Restricted file access on Windows in os and net/http
- CVE-2022-4172 Integer overflow in QEMU (ACPI ERST)
- CVE-2022-41719 Panic in github.com/shamaton/msgpack/v2
- CVE-2022-41717 Excessive memory growth in net/http and golang.org/x/net/http2
- CVE-2022-41716 Unsanitized NUL in environment variables on Windows in syscall and os/exec
- CVE-2022-41715 Memory exhaustion when compiling regular expressions in regexp/syntax
- CVE-2022-41714 fastest-json-copy 1.0.1 - Prototype Pollution
- CVE-2022-41713 deep-object-diff 1.1.0 - Prototype Pollution
- CVE-2022-41712 Path traversal in Frappe
- CVE-2022-41711 Badaso vulnerable to Remote Code Execution via malicious file upload
- CVE-2022-41710 Markdownify has Files or Directories Accessible to External Parties
- CVE-2022-4171 demon image annotation <= 5.0 - Improper Input Restriction Validation
- CVE-2022-41709 Markdownify subject to Remote Code Execution via malicious markdown file
- CVE-2022-41708 Missing authorization in relatedcode/Messenger
- CVE-2022-41707 Information disclosure in relatedcode/Messenger
- CVE-2022-41706 Browsershot 3.57.2 - Server Side XSS to LFR via URL
- CVE-2022-41705 Badaso vulnerable to Remote Code Execution (RCE)
- CVE-2022-41704 Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input
- CVE-2022-41703 Apache Superset: SQL injection vulnerability in adhoc clauses
- CVE-2022-41702 Delta Electronics DIAEnergie
- CVE-2022-41701 Delta Electronics DIAEnergie
- CVE-2022-41700 Privilege escalation in Intel(R) NUC Pro Software Suite installation software
- CVE-2022-4170 Code injection in rxvt-unicode
- CVE-2022-41699 Privilege escalation in Intel(R) QAT drivers for Windows
- CVE-2022-41698 WordPress If Menu – Visibility control for Menus plugin <= 0.16.3 - Broken Access Control
- CVE-2022-41697 Information disclosure in Ghost
- CVE-2022-41696 CVE-2022-41696
- CVE-2022-41695 WordPress Traffic Manager Plugin <= 1.4.5 is vulnerable to Broken Access Control
- CVE-2022-41694 BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694
- CVE-2022-41693 Privilege escalation in Intel(R) Quartus(R) Prime Pro edition software
- CVE-2022-41692 WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability
- CVE-2022-41691 BIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691
- CVE-2022-41690 Privilege escalation in Intel(R) Retail Edge Mobile iOS application
- CVE-2022-4169 Theme and plugin translation for Polylang <= 3.2.16 - Missing Authorization
- CVE-2022-41689 Privilege escalation in Intel In-Band Manageability software
- CVE-2022-41688 Auth bypass in InfraSuite Device Master
- CVE-2022-41687 Privilege escalation in Intel(R) NUC P14E Laptop Element software for Windows 10
- CVE-2022-41686 Memory corruption in OpenHarmony
- CVE-2022-41685 Cross-site request forgery in Csomagpontok és szállítási címkék WooCommerce-hez (WordPress plugin)
- CVE-2022-41684 Memory corruption in OpenImageIO
- CVE-2022-41681 File Upload vulnerability in Forma LMS
- CVE-2022-41680 SQL Injection in Forma LMS
- CVE-2022-41679 Cross-site scripting in Forma LMS version
- CVE-2022-41678 Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE
- CVE-2022-41677 Information disclosure in Camera Firmware
- CVE-2022-41676 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting
- CVE-2022-41675 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection
- CVE-2022-41674 Memory corruption in debian:debian linux
- CVE-2022-41672 Session still functional after user is deactivated
- CVE-2022-41671 SQL injection in EcoStruxure Operator Terminal Expert
- CVE-2022-41670 Path traversal in EcoStruxure Operator Terminal Expert
- CVE-2022-4167 Missing authorization in GitLab
- CVE-2022-41669 Security feature bypass in EcoStruxure Operator Terminal Expert
- CVE-2022-41668 Code injection in EcoStruxure Operator Terminal Expert
- CVE-2022-41667 Path traversal in EcoStruxure Operator Terminal Expert
- CVE-2022-41666 Security feature bypass in EcoStruxure Operator Terminal Expert
- CVE-2022-41665 Other in SICAM P850
- CVE-2022-41664 Memory corruption in JT2Go
- CVE-2022-41663 Use after free in JT2Go
- CVE-2022-41662 Memory corruption in JT2Go
- CVE-2022-41661 Memory corruption in JT2Go
- CVE-2022-41660 Memory corruption in JT2Go
- CVE-2022-4166 Contest Gallery < 19.1.5 - Author+ SQL Injection
- CVE-2022-41659 Missing authorization in Intel Unison software
- CVE-2022-41658 Privilege escalation in Intel(R) VTune(TM) Profiler software
- CVE-2022-41657 Path traversal in InfraSuite Device Master
- CVE-2022-41656 WordPress Account Manager for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability
- CVE-2022-41655 WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability
- CVE-2022-41654 ghost vulnerable to unauthorized newsletter modification via improper access controls
- CVE-2022-41653 Hardcoded credentials in SVMPC1
- CVE-2022-41652 WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerability
- CVE-2022-41651 Delta Electronics DIAEnergie