Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 248 of 437.
- CVE-2022-40827 SQL injection in codeigniter:codeigniter
- CVE-2022-40826 SQL injection in codeigniter:codeigniter
- CVE-2022-40825 SQL injection in codeigniter:codeigniter
- CVE-2022-40824 SQL injection in codeigniter:codeigniter
- CVE-2022-40817 Missing authorization in zammad:zammad
- CVE-2022-40816 Missing authorization in zammad:zammad
- CVE-2022-40812 Supply chain in democritus pdfs project:democritus pdfs
- CVE-2022-40811 Supply chain in democritus urls project:democritus urls
- CVE-2022-40810 Supply chain in democritus ip addresses project:democritus ip addresses
- CVE-2022-40809 Supply chain in democritus dicts project:democritus dicts
- CVE-2022-40808 Supply chain in democritus dates project:democritus dates
- CVE-2022-40807 Supply chain in democritus domains project:democritus domains
- CVE-2022-40806 Supply chain in democritus uuids project:democritus uuids
- CVE-2022-40805 Supply chain in democritus urls project:democritus urls
- CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check
- CVE-2022-40798 Missing authorization in ocomon project:ocomon
- CVE-2022-40797 File upload in roxyfileman:roxy fileman
- CVE-2022-40785 Command injection in mipcm:mipc camera firmware
- CVE-2022-40784 Memory corruption in mipcm:mipc camera firmware
- CVE-2022-40778 Cross-site scripting in opswat:metadefender
- CVE-2022-40777 File upload in interspire:email marketer
- CVE-2022-40775 Null dereference in axiosys:bento4
- CVE-2022-40774 Null dereference in axiosys:bento4
- CVE-2022-40773 Privilege escalation in zohocorp:manageengine servicedesk plus msp
- CVE-2022-40772 Security feature bypass in zohocorp:manageengine assetexplorer
- CVE-2022-40771 XML external entity in zohocorp:manageengine assetexplorer
- CVE-2022-40770 Command injection in zohocorp:manageengine servicedesk plus
- CVE-2022-40769 Weak cryptography in profanity project:profanity
- CVE-2022-40768 Information disclosure in debian:debian linux
- CVE-2022-40766 SQL injection in moderncampus:omni cms
- CVE-2022-40765 Mitel MiVoice Connect Command Injection
- CVE-2022-40764 Snyk CLI affected by Command Injection vulnerability
- CVE-2022-40762 Denial of service in samsung:mtower
- CVE-2022-40761 Denial of service in samsung:mtower
- CVE-2022-40760 Memory corruption in samsung:mtower
- CVE-2022-40759 Null dereference in samsung:mtower
- CVE-2022-40758 Memory corruption in samsung:mtower
- CVE-2022-40757 Memory corruption in samsung:mtower
- CVE-2022-40756 Misconfiguration in actian:psql
- CVE-2022-40755 Denial of service in jasper project:jasper
- CVE-2022-40754 Open Redirect
- CVE-2022-40753 IBM InfoSphere Information Server cross-site scripting
- CVE-2022-40752 Command injection in InfoSphere DataStage
- CVE-2022-40751 IBM UrbanCode Deploy information disclosure
- CVE-2022-40750 IBM WebSphere Application Server cross-site scripting
- CVE-2022-40748 Cross-site scripting in InfoSphere Information Server
- CVE-2022-40747 XML external entity in IBM InfoSphere Information Server
- CVE-2022-40746 Code injection in i
- CVE-2022-40745 IBM Aspera Faspex information disclosure
- CVE-2022-40744 IBM Aspera Faspex cross-site scripting
- CVE-2022-40743 Apache Traffic Server: Security issues with the xdebug plugin
- CVE-2022-40742 SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Local File Inclusion
- CVE-2022-40741 SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Command Injection
- CVE-2022-40740 Realtek GPON router - Command Injection
- CVE-2022-40739 Ragic, Inc. Ragic - Reflected XSS
- CVE-2022-40738 Null dereference in axiosys:bento4
- CVE-2022-40737 Memory corruption in axiosys:bento4
- CVE-2022-40736 Denial of service in axiosys:bento4
- CVE-2022-40735 Denial of service in diffie-hellman key exchange project:diffie-hellman key exchange
- CVE-2022-40734 UniSharp Laravel Filemanager directory traversal vulnerability
- CVE-2022-40733 Null dereference in Windows
- CVE-2022-40732 Null dereference in Windows
- CVE-2022-40725 PingID Desktop PIN attempt lockout bypass.
- CVE-2022-40724 Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint.
- CVE-2022-40723 Configuration-based MFA Bypass in PingID RADIUS PCV.
- CVE-2022-40722 Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.
- CVE-2022-40721 File upload in CreativeDream file uploader
- CVE-2022-40720 Command injection in DIR-2150
- CVE-2022-40719 Command injection in DIR-2150
- CVE-2022-40718 Memory corruption in DIR-2150
- CVE-2022-40717 Memory corruption in DIR-2150
- CVE-2022-40716 HashiCorp Consul vulnerable to authorization bypass
- CVE-2022-40715 Path traversal in nokia:1350 optical management system
- CVE-2022-40714 Cross-site scripting in nokia:1350 optical management system
- CVE-2022-40713 Path traversal in nokia:1350 optical management system
- CVE-2022-40712 Cross-site scripting in nokia:1350 optical management system
- CVE-2022-40711 Cross-site scripting in primekey:ejbca
- CVE-2022-40710 Privilege escalation in Trend Micro Deep Security
- CVE-2022-40709 Memory corruption in Trend Micro Deep Security
- CVE-2022-40708 Memory corruption in Trend Micro Deep Security
- CVE-2022-40707 Memory corruption in Trend Micro Deep Security
- CVE-2022-40705 Apache SOAP: XML External Entity Injection (XXE) allows unauthenticated users to read arbitrary files via HTTP
- CVE-2022-40704 Cross-site scripting in phoronix-test-suite
- CVE-2022-40703 Auth bypass in Kardia App
- CVE-2022-40702 WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control
- CVE-2022-40701 Path traversal in QUARTZ-GOLD
- CVE-2022-40700 Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins
- CVE-2022-4070 Insufficient Session Expiration in librenms/librenms
- CVE-2022-40699 WordPress Yet Another Stars Rating Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-40698 WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability
- CVE-2022-40697 WordPress 3com – Asesor de Cookies para normativa española Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-40696 WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure
- CVE-2022-40695 WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities
- CVE-2022-40694 WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-40693 Information disclosure in SDS-3008 Series Industrial Ethernet Switch
- CVE-2022-40692 WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-40691 Information disclosure in SDS-3008 Series Industrial Ethernet Switch
- CVE-2022-40690 Cross-site scripting in BookStack
- CVE-2022-4069 Cross-site Scripting (XSS) - Generic in librenms/librenms
- CVE-2022-40687 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability