Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 250 of 437.
- CVE-2022-40524 Buffer over-read in Modem
- CVE-2022-40523 Information exposure in Kernel
- CVE-2022-40522 Double free in Linux Networking
- CVE-2022-40521 Improper authorization in Modem
- CVE-2022-40520 Stack based buffer overflow in Core
- CVE-2022-4052 Student Attendance Management System createClass.php sql injection
- CVE-2022-40519 Buffer over-read in Core
- CVE-2022-40518 Buffer overread in Core
- CVE-2022-40517 Stack based buffer overflow in Core
- CVE-2022-40516 Stack-based buffer overflow in Core
- CVE-2022-40515 Double free in Video
- CVE-2022-40514 Buffer copy without checking size of input in WLAN Firmware
- CVE-2022-40513 Uncontrolled resource consumption in WLAN Firmware.
- CVE-2022-40512 Buffer over-read in WLAN Firmware.
- CVE-2022-40510 Buffer copy without checking size of input in Audio.
- CVE-2022-4051 Hostel Searching Project view-property.php sql injection
- CVE-2022-40508 Reachable assertion in Modem
- CVE-2022-40507 Double free in Core
- CVE-2022-40505 Buffer over-read in Modem
- CVE-2022-40504 Reachable assertion in Modem
- CVE-2022-40503 Buffer over-read in Bluetooth Host.
- CVE-2022-40502 Improper input validation in WLAN Host
- CVE-2022-4050 JoomSport < 5.2.8 - Unauthenticated SQLi
- CVE-2022-40497 Code injection in wazuh:wazuh
- CVE-2022-40494 Auth bypass in ehang-io:nps
- CVE-2022-40490 Cross-site scripting in prasathmani:tiny file manager
- CVE-2022-4049 WP User <= 7.0 - Unauthenticated SQLi
- CVE-2022-40489 ThinkCMF Cross Site Request Forgery (CSRF) vulnerability
- CVE-2022-40488 ProcessWire vulnerable to Cross-Site Request Forgery
- CVE-2022-40487 ProcessWire vulnerable to Cross-site Scripting
- CVE-2022-40486 Code injection in tp-link:archer ax10 v1 firmware
- CVE-2022-40485 SQL injection in wedding planner project:wedding planner
- CVE-2022-40484 SQL injection in wedding planner project:wedding planner
- CVE-2022-40483 SQL injection in wedding planner project:wedding planner
- CVE-2022-40482 Information disclosure in laravel:framework
- CVE-2022-40480 Denial of service in microchip:dt100112 firmware
- CVE-2022-4048 CODESYS V3 prone to Inadequate Encryption Stregth
- CVE-2022-40476 Null dereference in linux:linux kernel
- CVE-2022-40475 Command injection in totolink:a860r firmware
- CVE-2022-40472 Code injection in zktec:zkbio time
- CVE-2022-40471 File upload in oretnom23:clinic\'s patient management system
- CVE-2022-40470 Cross-site scripting in phpgurukul:blood donor management system
- CVE-2022-4047 Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
- CVE-2022-40469 Code injection in ikuai8:ikuaios
- CVE-2022-40468 Information disclosure in tinyproxy project:tinyproxy
- CVE-2022-4046 CODESYS: Improper memory restrictions fro CODESYS Control
- CVE-2022-4045 Denial of service in Mattermost
- CVE-2022-40447 SQL injection in zzcms:zzcms
- CVE-2022-40446 SQL injection in zzcms:zzcms
- CVE-2022-40444 Information disclosure in zzcms:zzcms
- CVE-2022-40443 Path traversal in zzcms:zzcms
- CVE-2022-40440 mxGraph vulnerable to cross-site scripting in setTooltips function
- CVE-2022-4044 Denial of service in Mattermost
- CVE-2022-40439 Denial of service in axiosys:bento4
- CVE-2022-40438 Memory corruption in axiosys:bento4
- CVE-2022-40435 Cross-site scripting in employee performance evaluation system project:employee performance evaluation system
- CVE-2022-40434 Cross-site scripting in softr:softr
- CVE-2022-40432 Supply chain in d8s-strings project:d8s-strings
- CVE-2022-40431 Supply chain in d8s-pdfs project:d8s-pdfs
- CVE-2022-40430 Supply chain in d8s-utility project:d8s-utility
- CVE-2022-4043 WP Custom Admin Interface < 7.29 - Admin+ PHP Object Injection
- CVE-2022-40429 Supply chain in d8s-ip-addresses project:d8s-ip-addresses
- CVE-2022-40428 Supply chain in d8s-mpeg project:d8s mpeg
- CVE-2022-40427 Supply chain in democritus domains project:democritus domains
- CVE-2022-40426 Supply chain in d8s-asns project:d8s-asns
- CVE-2022-40425 Supply chain in d8s-html project:d8s-html
- CVE-2022-40424 Supply chain in democritus urls project:democritus urls
- CVE-2022-4042 Paytium < 4.3.7 - Admin+ Stored XSS
- CVE-2022-4041 Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter
- CVE-2022-40408 FeehiCMS vulnerable to Cross-Site scripting via crafted payload
- CVE-2022-40407 File upload in chamilo:chamilo
- CVE-2022-40405 SQL injection in wowonder:wowonder
- CVE-2022-40404 SQL injection in wedding planner project:wedding planner
- CVE-2022-40403 SQL injection in wedding planner project:wedding planner
- CVE-2022-40402 SQL injection in wedding planner project:wedding planner
- CVE-2022-4039 Rhsso-container-image: unsecured management interface exposed to adjecent network
- CVE-2022-40373 FeehiCMS Cross Site Scripting vulnerability
- CVE-2022-4037 Race condition in GitLab
- CVE-2022-40365 ouqiang gocron Cross-site scripting vulnerability
- CVE-2022-40363 Memory corruption in flipperzero:flipper zero firmware
- CVE-2022-40361 Cross-site scripting in elitecms:elite cms
- CVE-2022-4036 Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
- CVE-2022-40359 Cross-site scripting in kfm project:kfm
- CVE-2022-40358 Cross-site scripting in ajaxplorer:ajaxplorer
- CVE-2022-40357 Server-side request forgery in zblogcn:z-blogphp
- CVE-2022-40354 SQL injection in online tours \& travels management system project:online tours \& travels management system
- CVE-2022-40353 SQL injection in online tours \& travels management system project:online tours \& travels management system
- CVE-2022-40352 SQL injection in online tours \& travels management system project:online tours \& travels management system
- CVE-2022-4035 Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form
- CVE-2022-40348 Cross-site scripting in intern record system project:intern record system
- CVE-2022-40347 SQL injection in intern record system project:intern record system
- CVE-2022-40341 File upload in mojoportal:mojoportal
- CVE-2022-4034 Appointment Hour Booking <= 1.3.72 - CSV Injection
- CVE-2022-40337 Other in aspiresoftware:open aviation strategic engineering system
- CVE-2022-4033 Quiz and Survey Master <= 8.0.4 - Improper Input Validation
- CVE-2022-40325 Cross-site scripting in sysaid:help desk
- CVE-2022-40324 Cross-site scripting in sysaid:help desk
- CVE-2022-40323 Cross-site scripting in sysaid:help desk
- CVE-2022-40322 Cross-site scripting in sysaid:help desk
- CVE-2022-40320 Memory corruption in fedoraproject:fedora