Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 243 of 437.
- CVE-2022-41407 SQL injection in online pet shop we app project:online pet shop we app
- CVE-2022-41406 File upload in church management system project:church management system
- CVE-2022-41404 org.ini4j allows attackers to cause a Denial of Service (DoS)
- CVE-2022-41403 SQL injection in newsletter subscribe \(popup \+ regular module\) project:newsletter subscribe \(popup \+ regular module\)
- CVE-2022-41401 OpenRefine Server-Side Request Forgery vulnerability
- CVE-2022-41400 Hardcoded credentials in sage:sage 300
- CVE-2022-4140 Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access
- CVE-2022-41399 Hardcoded credentials in sage:sage 300
- CVE-2022-41398 Hardcoded credentials in sage:sage 300
- CVE-2022-41397 Hardcoded credentials in sage:sage 300
- CVE-2022-41396 Command injection in tenda:w15e firmware
- CVE-2022-41395 Command injection in tenda:w15e firmware
- CVE-2022-41392 Cross-site scripting in totaljs:total.js
- CVE-2022-41391 SQL injection in ocomon project:ocomon
- CVE-2022-41390 SQL injection in ocomon project:ocomon
- CVE-2022-4139 Memory corruption in kernel
- CVE-2022-41387 Supply chain in democritus:d8s-pdfs
- CVE-2022-41386 Supply chain in democritus:d8s-utility
- CVE-2022-41385 Supply chain in democritus:d8s-html
- CVE-2022-41384 Supply chain in democritus:d8s-domains
- CVE-2022-41383 Supply chain in democritus:d8s-archives
- CVE-2022-41382 Supply chain in democritus:d8s-json
- CVE-2022-41381 Supply chain in democritus:d8s-utility
- CVE-2022-41380 Supply chain in democritus:d8s-yaml
- CVE-2022-4138 Cross-site request forgery in GitLab
- CVE-2022-41379 File upload in online leave management system project:online leave management system
- CVE-2022-41378 SQL injection in online pet shop we app project:online pet shop we app
- CVE-2022-41377 SQL injection in online pet shop we app project:online pet shop we app
- CVE-2022-41376 Cross site scripting in Metro UI
- CVE-2022-4137 Keycloak: reflected xss attack
- CVE-2022-4136 Exposed Dangerous Method or Function in qmpaas/leadshop
- CVE-2022-41358 Cross-site scripting in garage management system project:garage management system
- CVE-2022-41355 SQL injection in online leave management system project:online leave management system
- CVE-2022-41354 Argo CD authenticated but unauthorized users may enumerate Application names via the API
- CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload
- CVE-2022-41351 Cross-site scripting in zimbra:collaboration
- CVE-2022-41350 Cross-site scripting in zimbra:collaboration
- CVE-2022-4135 Google Chromium GPU Heap Buffer Overflow
- CVE-2022-41349 Cross-site scripting in zimbra:collaboration
- CVE-2022-41348 Cross-site scripting in zimbra:collaboration
- CVE-2022-41347 Privilege escalation in zimbra:collaboration
- CVE-2022-41343 Dompdf allows remote file inclusion because URI validation failure does not halt font registration
- CVE-2022-41342 Memory corruption in Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits
- CVE-2022-41340 secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery
- CVE-2022-4134 OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability
- CVE-2022-41339 Privilege escalation in zohocorp:manageengine mobile device manager plus
- CVE-2022-41336 Cross-site scripting in FortiPortal
- CVE-2022-41335 Path traversal in FortiOS
- CVE-2022-41334 Cross-site scripting in FortiOS
- CVE-2022-41333 Denial of service in FortiRecorder
- CVE-2022-41331 Auth bypass in FortiPresence
- CVE-2022-41330 Cross-site scripting in FortiOS
- CVE-2022-41329 Information disclosure in FortiOS
- CVE-2022-41328 Fortinet FortiOS Path Traversal
- CVE-2022-41327 Information disclosure in FortiOS
- CVE-2022-41326 Missing authorization in mitel:micollab
- CVE-2022-41325 Integer overflow in debian:debian linux
- CVE-2022-41324 Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read acc
- CVE-2022-41323 Django denial-of-service vulnerability in internationalized URLs
- CVE-2022-41322 Code injection in fedoraproject:fedora
- CVE-2022-41320 Information disclosure in veritas:system recovery
- CVE-2022-4132 Memory leak on tls connections
- CVE-2022-41319 Cross-site scripting in veritas:desktop and laptop option
- CVE-2022-41318 Integer overflow in squid-cache:squid
- CVE-2022-41317 Information disclosure in squid-cache:squid
- CVE-2022-41316 HashiCorp Vault's revocation list not respected
- CVE-2022-41315 WordPress Ezoic plugin <= 2.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-41314 Privilege escalation in Intel(R) Network Adapter installer software
- CVE-2022-41313 Cross-site scripting in SDS-3008 Series Industrial Ethernet Switch
- CVE-2022-41312 Cross-site scripting in SDS-3008 Series Industrial Ethernet Switch
- CVE-2022-41311 Cross-site scripting in SDS-3008 Series Industrial Ethernet Switch
- CVE-2022-41310 Memory corruption in Autodesk Design Review
- CVE-2022-4131 Denial of service in GitLab
- CVE-2022-41309 Memory corruption in Autodesk Design Review
- CVE-2022-41308 Memory corruption in Subassembly Composer
- CVE-2022-41307 Memory corruption in Subassembly Composer
- CVE-2022-41306 Memory corruption in Autodesk® Design Review
- CVE-2022-41305 Memory corruption in Subassembly Composer
- CVE-2022-41304 Memory corruption in FBX SDK
- CVE-2022-41303 Use after free in FBX SDK
- CVE-2022-41302 Memory corruption in FBX SDK
- CVE-2022-41301 Memory corruption in Subassembly Composer
- CVE-2022-4130 Server-side request forgery in Satellite Server
- CVE-2022-41299 IBM Cloud Transformation Advisor cross-site scripting
- CVE-2022-41297 IBM Db2U cross-site request forgery
- CVE-2022-41296 IBM Db2U cross-site respect forgery
- CVE-2022-41294 Misconfiguration in Robotic Process Automation
- CVE-2022-41291 Auth bypass in InfoSphere Information Server
- CVE-2022-41290 IBM AIX privilege escalation
- CVE-2022-4129 Race condition in Linux kernel (l2tp)
- CVE-2022-41288 Denial of service in JT2Go
- CVE-2022-41287 Denial of service in JT2Go
- CVE-2022-41286 Memory corruption in JT2Go
- CVE-2022-41285 Use after free in JT2Go
- CVE-2022-41284 Memory corruption in JT2Go
- CVE-2022-41283 Memory corruption in JT2Go
- CVE-2022-41282 Memory corruption in JT2Go
- CVE-2022-41281 Memory corruption in JT2Go
- CVE-2022-41280 Null dereference in JT2Go
- CVE-2022-4128 Null dereference in Linux kernel (mptcp)