Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 244 of 437.
- CVE-2022-41279 Null dereference in JT2Go
- CVE-2022-41278 Null dereference in JT2Go
- CVE-2022-41275 Open redirect in Solution Manager (Enterprise Search)
- CVE-2022-41274 Missing authorization in Disclosure Management
- CVE-2022-41273 Open redirect in Sourcing and SAP Contract Lifecycle Management
- CVE-2022-41272 Missing authorization in NetWeaver Process Integration
- CVE-2022-41271 Missing authorization in NetWeaver Process Integration
- CVE-2022-4127 Null dereference in Linux kernel (io uring)
- CVE-2022-41268 Privilege escalation in Business Planning and Consolidation
- CVE-2022-41267 File upload in BusinessObjects Business Intelligence Platform
- CVE-2022-41266 Cross-site scripting in Commerce Webservices 2.0 (Swagger UI)
- CVE-2022-41264 Code injection in BASIS
- CVE-2022-41263 Missing authorization in Business Objects Business Intelligence Platform (Web intelligence)
- CVE-2022-41262 Cross-site scripting in NetWeaver AS for Java (Http Provider Service)
- CVE-2022-41261 Information disclosure in Solution Manager (Diagnostic Agent)
- CVE-2022-41260 Cross-site scripting in SAP Financial Consolidation
- CVE-2022-4126 Use of Default Password
- CVE-2022-41259 Denial of service in SAP SQL Anywhere
- CVE-2022-41258 Cross-site scripting in SAP Financial Consolidation
- CVE-2022-41255 API token stored in plain text by Jenkins CONS3RT Plugin
- CVE-2022-41254 Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials
- CVE-2022-41253 CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials
- CVE-2022-41252 Missing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDs
- CVE-2022-41251 Jenkins Apprenda Plugin has Missing Authorization vulnerability
- CVE-2022-41250 Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentials
- CVE-2022-4125 Popup Manager <= 1.6.6 - Unauthenticated Stored XSS
- CVE-2022-41249 Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery
- CVE-2022-41248 Jenkins BigPanda Notifier Plugin Missing Password Field Masking
- CVE-2022-41247 Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted
- CVE-2022-41246 CSRF vulnerability and mM
- CVE-2022-41245 CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials
- CVE-2022-41244 Missing hostname validation in Jenkins View26 Test-Reporting Plugin
- CVE-2022-41243 Jenkins SmallTest Plugin missing hostname validation
- CVE-2022-41242 Jenkins extreme-feedback Plugin vulnerable to Missing Authorization
- CVE-2022-41241 Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference
- CVE-2022-41240 Stored XSS vulnerability in Jenkins Walti plugin
- CVE-2022-4124 Popup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup Deletion
- CVE-2022-41239 Stored XSS vulnerability in Jenkins DotCi Plugin
- CVE-2022-41238 Lack of authentication mechanism in Jenkins DotCi Plugin webhook
- CVE-2022-41237 RCE vulnerability in Jenkins DotCi Plugin
- CVE-2022-41236 CSRF vulnerability in Jenkins Security Inspector plugin
- CVE-2022-41235 Jenkins WildFly Deployer Plugin vulnerable to path traversal
- CVE-2022-41234 Missing webhook endpoint authorization in Jenkins Rundeck Plugin
- CVE-2022-41233 Jenkins Rundeck Plugin Missing Authorization vulnerability
- CVE-2022-41232 Jenkins build-publisher plugin vulnerable to cross-site request forgery
- CVE-2022-41231 Path traversal in Jenkins build-publisher Plugin
- CVE-2022-41230 Missing permission check in Jenkins build-publisher Plugin
- CVE-2022-4123 Buildah (as part of Podman) vulnerable to Path Traversal
- CVE-2022-41229 Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting
- CVE-2022-41228 Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization
- CVE-2022-41227 Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery
- CVE-2022-41226 Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference
- CVE-2022-41225 Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting
- CVE-2022-41224 Jenkins vulnerable to stored cross site scripting in the I:helpIcon component
- CVE-2022-41223 Mitel MiVoice Connect Code Injection
- CVE-2022-41222 Use after free in canonical:ubuntu linux
- CVE-2022-41221 XML external entity in opentext:archive center administration
- CVE-2022-41220 Memory corruption in md2roff project:md2roff
- CVE-2022-4122 Buildah (as part of Podman) vulnerable to Link Following
- CVE-2022-41218 Use after free in debian:debian linux
- CVE-2022-41217 Cloudflow - Unauthenticated file upload vulnerability
- CVE-2022-41216 Cloudflow - Local File Inclusion Vulnerability
- CVE-2022-41215 Open redirect in SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2022-41214 Path traversal in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2022-41212 Path traversal in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2022-41211 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-41210 Weak cryptography in SAP Customer Data Cloud (Gigya)
- CVE-2022-4121 Null dereference in libetpan
- CVE-2022-41209 Weak cryptography in SAP Customer Data Cloud (Gigya)
- CVE-2022-41208 Cross-site scripting in SAP Financial Consolidation
- CVE-2022-41207 Open redirect in SAP Biller Direct
- CVE-2022-41206 Cross-site scripting in SAP BusinessObjects Business Intelligence platform (Analysis for OLAP)
- CVE-2022-41205 Code injection in SAP GUI for Windows
- CVE-2022-41204 Open redirect in SAP Commerce
- CVE-2022-41203 Deserialization in SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad)
- CVE-2022-41202 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41201 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41200 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-4120 Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection
- CVE-2022-41199 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41198 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41197 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41196 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41195 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41194 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41193 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41192 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41191 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41190 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-4119 Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS
- CVE-2022-41189 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41188 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41187 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41186 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2022-41185 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-41184 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-41183 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-41182 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-41181 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-41180 Memory corruption in SAP 3D Visual Enterprise Author