Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 249 of 437.
- CVE-2022-40686 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-40685 Information disclosure in Intel(R) DCM software
- CVE-2022-40684 Fortinet Multiple Products Authentication Bypass
- CVE-2022-40683 Memory corruption in FortiWeb
- CVE-2022-40682 Missing authorization in FortiClientWindows
- CVE-2022-40681 Missing authorization in FortiClientWindows
- CVE-2022-40680 Cross-site scripting in FortiOS
- CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
- CVE-2022-40679 Command injection in FortiADC
- CVE-2022-40678 Information disclosure in FortiNAC
- CVE-2022-40677 Command injection in FortiNAC
- CVE-2022-40676 Cross-site scripting in FortiNAC
- CVE-2022-40675 Weak cryptography in FortiNAC
- CVE-2022-40674 Use after free in debian:debian linux
- CVE-2022-40673 Missing authorization in fedoraproject:fedora
- CVE-2022-40672 WordPress CPO Shortcodes plugin <= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-40671 WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-40664 Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher
- CVE-2022-40663 Memory corruption in NIS-Elements Viewer
- CVE-2022-40662 Memory corruption in NIS-Elements Viewer
- CVE-2022-40661 Memory corruption in NIS-Elements Viewer
- CVE-2022-40660 Memory corruption in NIS-Elements Viewer
- CVE-2022-4066 davidmoreno onion Log response.c onion_response_flush allocation of resources
- CVE-2022-40659 Memory corruption in NIS-Elements Viewer
- CVE-2022-40658 Memory corruption in NIS-Elements Viewer
- CVE-2022-40657 Memory corruption in NIS-Elements Viewer
- CVE-2022-40656 Memory corruption in NIS-Elements Viewer
- CVE-2022-40655 Memory corruption in NIS-Elements Viewer
- CVE-2022-40654 Memory corruption in SpaceClaim
- CVE-2022-40653 Memory corruption in SpaceClaim
- CVE-2022-40652 Memory corruption in SpaceClaim
- CVE-2022-40651 Memory corruption in SpaceClaim
- CVE-2022-40650 Memory corruption in SpaceClaim
- CVE-2022-4065 cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal
- CVE-2022-40649 Memory corruption in SpaceClaim
- CVE-2022-40648 Memory corruption in SpaceClaim
- CVE-2022-40647 Memory corruption in SpaceClaim
- CVE-2022-40646 Memory corruption in SpaceClaim
- CVE-2022-40645 Memory corruption in SpaceClaim
- CVE-2022-40644 Memory corruption in SpaceClaim
- CVE-2022-40643 Memory corruption in SpaceClaim
- CVE-2022-40642 Memory corruption in SpaceClaim
- CVE-2022-40641 Memory corruption in SpaceClaim
- CVE-2022-40640 Memory corruption in SpaceClaim
- CVE-2022-4064 Dalli Meta Protocol request_formatter.rb self.meta_set injection
- CVE-2022-40639 Use after free in SpaceClaim
- CVE-2022-40638 Use after free in SpaceClaim
- CVE-2022-40637 Use after free in SpaceClaim
- CVE-2022-40636 Memory corruption in SpaceClaim
- CVE-2022-40635 Improper Control of Dynamically-Managed Code Resources in Crafter Studio
- CVE-2022-40634 Improper Control of Dynamically-Managed Code Resources in Crafter Studio
- CVE-2022-40633 Rittal CMC III Improper Access Control
- CVE-2022-40632 WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-40631 Cross-site scripting in SCALANCE X200-4P IRT
- CVE-2022-40630 Improper Session Management Vulnerability in Tacitine Firewall
- CVE-2022-4063 InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE
- CVE-2022-40629 Sensitive Information Disclosure Vulnerability in Tacitine Firewall
- CVE-2022-40628 Remote Code Execution Vulnerability in Tacitine Firewall
- CVE-2022-40626 Reflected XSS in the backurl parameter of Zabbix Frontend
- CVE-2022-40624 Command injection in pfsense:pfblockerng
- CVE-2022-40623 WAVLINK Quantum D4G (WN531G3) CSRF
- CVE-2022-40622 WAVLINK Quantum D4G (WN531G3) Session Management by IP Address
- CVE-2022-40621 WAVLINK Quantum D4G (WN531G3) Pass-The-Hash
- CVE-2022-40620 Security feature bypass in netgear:r6230 firmware
- CVE-2022-4062 Missing authorization in EcoStruxure Power Commission
- CVE-2022-40619 Command injection in netgear:r6230 firmware
- CVE-2022-40617 Denial of service in canonical:ubuntu linux
- CVE-2022-40616 Auth bypass in Maximo Asset Management
- CVE-2022-40615 IBM Sterling Partner Engagement Manager SQL injection
- CVE-2022-4061 JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
- CVE-2022-40609 IBM SDK, Java Technology Edition code execution
- CVE-2022-40608 Path traversal in Spectrum Protect Plus
- CVE-2022-40607 IBM Spectrum Scale directory traversal
- CVE-2022-40606 Cross-site scripting in mitre:caldera
- CVE-2022-40605 Cross-site scripting in mitre:caldera
- CVE-2022-40604 Format String Vulnerability
- CVE-2022-40603 Cross-site scripting in ATP series firmware
- CVE-2022-40602 Hardcoded credentials in LTE3301-M209
- CVE-2022-4060 User Post Gallery <= 2.19 - Unauthenticated RCE
- CVE-2022-4059 Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi
- CVE-2022-4058 Photo Gallery < 1.8.3 - Stored XSS via CSRF
- CVE-2022-4057 Autoptimize < 3.1.0 - Sensitive Data Disclosure
- CVE-2022-4055 Security feature bypass in xdg-utils
- CVE-2022-40540 Buffer copy without checking the size of input in Linux Kernel
- CVE-2022-4054 Information disclosure in GitLab
- CVE-2022-40539 Improper Validation of Array Index in Automotive Android OS
- CVE-2022-40538 Reachable assertion in Modem
- CVE-2022-40537 Improper Validation of Array Index in Bluetooth HOST
- CVE-2022-40536 Improper authentication in Modem
- CVE-2022-40535 Buffer Over-read in WLAN
- CVE-2022-40534 Improper Validation of Array Index in Audio
- CVE-2022-40533 Untrusted Pointer Dereference in Core
- CVE-2022-40532 Integer overflow or wraparound in WLAN
- CVE-2022-40531 Incorrect type conversion in WLAN
- CVE-2022-40530 Integer overflow to buffer overflow in WLAN
- CVE-2022-4053 Student Attendance Management System createClass.php cross site scripting
- CVE-2022-40529 Improper access control in Kernel
- CVE-2022-40527 Reachable Assertion in WLAN Embedded SW
- CVE-2022-40525 Information Exposure in Linux Networking Firmware