Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 253 of 437.
- CVE-2022-40080 Memory corruption in acer:aspire e5-475g firmware
- CVE-2022-4008 Denial of service in Octopus Tentacle
- CVE-2022-40076 Memory corruption in tenda:ac21 firmware
- CVE-2022-40075 Memory corruption in tenda:ac21 firmware
- CVE-2022-40074 Memory corruption in tenda:ac21 firmware
- CVE-2022-40073 Memory corruption in tenda:ac21 firmware
- CVE-2022-40072 Memory corruption in tenda:ac21 firmware
- CVE-2022-40071 Memory corruption in tenda:ac21 firmware
- CVE-2022-40070 Memory corruption in tenda:ac21 firmware
- CVE-2022-4007 Cross-site scripting in GitLab
- CVE-2022-40069 Memory corruption in tenda:ac21 firmware
- CVE-2022-40068 Memory corruption in tenda:ac21 firmware
- CVE-2022-40067 Memory corruption in tenda:ac21 firmware
- CVE-2022-4006 WBCE CMS Header class.login.php increase_attempts excessive authentication
- CVE-2022-40055 Auth bypass in gxgroup:gpon ont titanium 2122a firmware
- CVE-2022-40050 File upload in zfile:zfile
- CVE-2022-4005 Donation Button <= 4.0.0 - Contributor+ Stored XSS
- CVE-2022-40049 SQL injection in theme park ticketing system project:theme park ticketing system
- CVE-2022-40048 File upload in flatpress:flatpress
- CVE-2022-40047 Cross-site scripting in flatpress:flatpress
- CVE-2022-40044 Centreon contains cross-site scripting vulnerability via esc_name parameter
- CVE-2022-40043 Centreon SQL Injection vulnerability via esc_name parameter
- CVE-2022-4004 Donation Button <= 4.0.0 - Subscriber+ Broken Access Control leading to SMS Spam
- CVE-2022-40037 File upload in javaweb blog project:javaweb blog
- CVE-2022-40036 Missing authorization in blog-ssm project:blog-ssm
- CVE-2022-40035 File upload in blog-ssm project:blog-ssm
- CVE-2022-40034 Cross-site scripting in javaweb blog project:javaweb blog
- CVE-2022-40032 SQL injection in simple task managing system project:simple task managing system
- CVE-2022-40030 SQL injection in simple task managing system project:simple task managing system
- CVE-2022-4003 Denial of service in Q14 Mesh Router Firmware
- CVE-2022-40029 Cross-site scripting in simple task managing system project:simple task managing system
- CVE-2022-40028 Cross-site scripting in simple task managing system project:simple task managing system
- CVE-2022-40027 Cross-site scripting in simple task managing system project:simple task managing system
- CVE-2022-40026 SQL injection in simple task managing system project:simple task managing system
- CVE-2022-40023 mako is vulnerable to Regular Expression Denial of Service
- CVE-2022-40022 Command injection in microchip:syncserver s650 firmware
- CVE-2022-40021 Command injection in qvidium:amino a140 firmware
- CVE-2022-4002 Command injection in Q14 Mesh Router Firmware
- CVE-2022-40016 Use after free in media-server project:media-server
- CVE-2022-40011 Cross-site scripting in typora:typora
- CVE-2022-40010 Cross-site scripting in tenda:ac6 firmware
- CVE-2022-4001 Auth bypass in Q14 Mesh Router Firmware
- CVE-2022-40009 Use after free in swftools:swftools
- CVE-2022-40008 Memory corruption in swftools:swftools
- CVE-2022-40005 Command injection in intelbras:wifiber 120ac inmesh firmware
- CVE-2022-40004 Cross-site scripting in thingsboard:thingsboard
- CVE-2022-40002 FeehiCMS Cross Site Scripting vulnerability
- CVE-2022-40001 FeehiCMS Cross Site Scripting vulnerability
- CVE-2022-40000 FeehiCMS Cross Site Scripting vulnerability
- CVE-2022-4000 WooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSS
- CVE-2022-39997 A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate privileges
- CVE-2022-39996 Cross-site scripting in teldat:rs123 firmware
- CVE-2022-3999 WooCommerce Shipping - DPD baltic < 1.2.57 - Subscriber+ Arbitrary Options Deletion
- CVE-2022-39989 Hardcoded credentials in fighting cock information system project:fighting cock information system
- CVE-2022-39988 Cross-site scripting in centreon:centreon
- CVE-2022-39987 RaspAP Command Injection vulnerability
- CVE-2022-39986 RaspAP Command Injection vulnerability
- CVE-2022-39983 File upload in instantdeveloper:rd3
- CVE-2022-3998 MonikaBrzica scm uredi_korisnika.php sql injection
- CVE-2022-39978 File upload in online pet shop we app project:online pet shop we app
- CVE-2022-39977 File upload in online pet shop we app project:online pet shop we app
- CVE-2022-39976 SQL injection in school activity updates with sms notification project:school activity updates with sms notification
- CVE-2022-39975 Liferay Portal Missing Authorization vulnerability
- CVE-2022-39974 WASM3 Improper Input Validation vulnerability
- CVE-2022-3997 MonikaBrzica scm upis_u_bazu.php sql injection
- CVE-2022-39960 Missing authorization in netic:group export
- CVE-2022-3996 X.509 Policy Constraints Double Locking
- CVE-2022-39959 Privilege escalation in panini:everest engine
- CVE-2022-39958 Security feature bypass in ModSecurity Core Rule Set
- CVE-2022-39957 Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header
- CVE-2022-39956 Security feature bypass in ModSecurity Core Rule Set
- CVE-2022-39955 Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header
- CVE-2022-39954 XML external entity in FortiNAC
- CVE-2022-39953 Privilege escalation in FortiNAC
- CVE-2022-39952 Code injection in FortiNAC
- CVE-2022-39951 Command injection in FortiWeb
- CVE-2022-39950 Cross-site scripting in Fortinet FortiAnalyzer, FortiManager
- CVE-2022-3995 TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference
- CVE-2022-39949 Security feature bypass in Fortinet FortiEDR
- CVE-2022-39948 Security feature bypass in FortiOS
- CVE-2022-39947 Command injection in FortiADC
- CVE-2022-39946 Missing authorization in FortiNAC
- CVE-2022-39945 Missing authorization in Fortinet FortiMail
- CVE-2022-39944 The Apache Linkis JDBC EngineConn module has a RCE Vulnerability
- CVE-2022-3994 Authenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token Disclosure
- CVE-2022-3993 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
- CVE-2022-3992 SourceCodester Sanitization Management System Banner Image cross site scripting
- CVE-2022-39915 Missing authorization in Samsung Calendar
- CVE-2022-39914 Information disclosure in Samsung Mobile Devices
- CVE-2022-39913 Information disclosure in Samsung Mobile Devices
- CVE-2022-39912 Missing authorization in Samsung Mobile Devices
- CVE-2022-39911 Security feature bypass in Samsung Pass
- CVE-2022-39910 Missing authorization in Samsung Pass
- CVE-2022-3991 Photospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2022-39909 Other in Samsung Gear IconX PC Manager
- CVE-2022-39908 Race condition in Samsung Mobile Devices
- CVE-2022-39907 Integer overflow in Samsung Mobile Devices
- CVE-2022-39906 Missing authorization in Samsung Mobile Devices
- CVE-2022-39905 Information disclosure in Samsung Mobile Devices
- CVE-2022-39904 Information disclosure in Samsung Mobile Devices