Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 242 of 437.
- CVE-2022-4155 Contest Gallery < 19.1.5 - Admin+ SQL Injection
- CVE-2022-41547 MobSF allows attackers to read arbitrary files via a crafted HTTP request
- CVE-2022-41545 Weak cryptography in netgear:c7800 firmware
- CVE-2022-41544 Code injection in get-simple:getsimple cms
- CVE-2022-41542 Auth bypass in devhubapp:devhub
- CVE-2022-41541 Auth bypass in tp-link:ax10 firmware
- CVE-2022-41540 Hardcoded credentials in tp-link:ax10 firmware
- CVE-2022-4154 Contest Gallery Pro < 19.1.5 - Admin+ SQL Injection
- CVE-2022-41539 File upload in wedding planner project:wedding planner
- CVE-2022-41538 File upload in wedding planner project:wedding planner
- CVE-2022-41537 File upload in online tours \& travels management system project:online tours \& travels management system
- CVE-2022-41536 SQL injection in open source sacco management system project:open source sacco management system
- CVE-2022-41535 SQL injection in open source sacco management system project:open source sacco management system
- CVE-2022-41534 File upload in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-41533 File upload in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-41532 SQL injection in open source sacco management system project:open source sacco management system
- CVE-2022-41530 SQL injection in open source sacco management system project:open source sacco management system
- CVE-2022-4153 Contest Gallery < 19.1.5.1 - Author+ SQL Injection
- CVE-2022-41528 Memory corruption in totolink:nr1800x firmware
- CVE-2022-41527 Memory corruption in totolink:nr1800x firmware
- CVE-2022-41526 Memory corruption in totolink:nr1800x firmware
- CVE-2022-41525 Command injection in totolink:nr1800x firmware
- CVE-2022-41524 Memory corruption in totolink:nr1800x firmware
- CVE-2022-41523 Memory corruption in totolink:nr1800x firmware
- CVE-2022-41522 Memory corruption in totolink:nr1800x firmware
- CVE-2022-41521 Memory corruption in totolink:nr1800x firmware
- CVE-2022-41520 Memory corruption in totolink:nr1800x firmware
- CVE-2022-4152 Contest Gallery < 19.1.5 - Author+ SQL Injection
- CVE-2022-41518 Command injection in totolink:nr1800x firmware
- CVE-2022-41517 Memory corruption in totolink:nr1800x firmware
- CVE-2022-41515 SQL injection in open source sacco management system project:open source sacco management system
- CVE-2022-41514 SQL injection in open source sacco management system project:open source sacco management system
- CVE-2022-41513 SQL injection in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-41512 File upload in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-4151 Contest Gallery < 19.1.5 - Admin+ SQL Injection
- CVE-2022-41505 Auth bypass in tp-link:tapo c200 v1 firmware
- CVE-2022-41504 File upload in billing system project:billing system
- CVE-2022-41500 Cross-site request forgery in eyoucms:eyoucms
- CVE-2022-4150 Contest Gallery < 19.1.5 - Author+ SQL Injection
- CVE-2022-41498 SQL injection in billing system project:billing system
- CVE-2022-41497 Server-side request forgery in clippercms:clippercms
- CVE-2022-41496 Server-side request forgery in idreamsoft:icms
- CVE-2022-41495 Server-side request forgery in clippercms:clippercms
- CVE-2022-4149 Local privilege escalation using log file
- CVE-2022-41489 Cross-site request forgery in wayos:lq-04 firmware
- CVE-2022-41485 Memory corruption in tenda:ac6 firmware
- CVE-2022-41484 Memory corruption in tenda:ap500v1 firmware
- CVE-2022-41483 Memory corruption in tenda:ac6v2.0 firmware
- CVE-2022-41482 Memory corruption in tenda:ac6v2.0 firmware
- CVE-2022-41481 Memory corruption in tenda:ac6v2.0 firmware
- CVE-2022-41480 Memory corruption in tenda:ac6v2.0 firmware
- CVE-2022-4148 WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion
- CVE-2022-41479 Missing authorization in devexpress:asp.net web forms controls
- CVE-2022-41477 Server-side request forgery in webidsupport:webid
- CVE-2022-41475 Cross-site request forgery in rpcms:rpcms
- CVE-2022-41474 Cross-site request forgery in rpcms:rpcms
- CVE-2022-41473 Cross-site scripting in rpcms:rpcms
- CVE-2022-41472 Cross-site scripting in 74cms:74cmsse
- CVE-2022-41471 Privilege escalation in 74cms:74cmsse
- CVE-2022-4147 Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed
- CVE-2022-4146 EL Injection Vulnerability in Hitachi Replication Manager
- CVE-2022-4145 Content spoofing
- CVE-2022-41446 Missing authorization in record management system project:record management system
- CVE-2022-41445 Cross-site scripting in teacher record management system project:teacher record management system
- CVE-2022-41444 Cross-site scripting in cacti:cacti
- CVE-2022-41443 Other in phpipam:phpipam
- CVE-2022-41442 Cross-site scripting in picuploader project:picuploader
- CVE-2022-41441 Cross-site scripting in reqlogic:reqlogic
- CVE-2022-41440 SQL injection in billing system project project:billing system project
- CVE-2022-4144 Memory corruption in QEMU (QXL device)
- CVE-2022-41439 SQL injection in billing system project project:billing system project
- CVE-2022-41437 File upload in billing system project project:billing system project
- CVE-2022-41436 Auth bypass in oxhoo:tp50 firmware
- CVE-2022-41435 Cross-site scripting in openwrt:luci
- CVE-2022-41434 Cross-site scripting in eyesofnetwork:web interface
- CVE-2022-41433 Cross-site scripting in eyesofnetwork:web interface
- CVE-2022-41432 Cross-site scripting in eyesofnetwork:web interface
- CVE-2022-41431 Cross-site scripting in mindskip:xzs
- CVE-2022-41430 Memory corruption in axiosys:bento4
- CVE-2022-4143 Race condition in GitLab
- CVE-2022-41429 Memory corruption in axiosys:bento4
- CVE-2022-41428 Memory corruption in axiosys:bento4
- CVE-2022-41427 Denial of service in axiosys:bento4
- CVE-2022-41426 Denial of service in axiosys:bento4
- CVE-2022-41425 Memory corruption in axiosys:bento4
- CVE-2022-41424 Denial of service in axiosys:bento4
- CVE-2022-41423 Memory corruption in axiosys:bento4
- CVE-2022-41420 Memory corruption in nasm:netwide assembler
- CVE-2022-4142 WordPress Filter Gallery Plugin < 0.1.6 - Admin+ Stored XSS
- CVE-2022-41419 Denial of service in axiosys:bento4
- CVE-2022-41418 File upload in blogengine:blogengine.net
- CVE-2022-41417 Missing authorization in blogengine:blogengine.net
- CVE-2022-41416 SQL injection in online tours \& travels management system project:online tours \& travels management system
- CVE-2022-41415 Memory corruption in acer:altos w2000h-w570h f4 firmware
- CVE-2022-41414 Liferay Portal Insecure Default Configuration in auth.login.prompt.enabled
- CVE-2022-41413 Cross-site request forgery in perfsonar:perfsonar
- CVE-2022-41412 Server-side request forgery in perfsonar:perfsonar
- CVE-2022-4141 Heap-based Buffer Overflow in vim/vim
- CVE-2022-41409 Integer overflow in pcre:pcre2
- CVE-2022-41408 SQL injection in online pet shop we app project:online pet shop we app