Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 255 of 437.
- CVE-2022-39809 Cross-site scripting in wso2:enterprise integrator
- CVE-2022-39808 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-39807 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-39806 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-39805 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-39804 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-39803 Memory corruption in SAP 3D Visual Enterprise Author
- CVE-2022-39802 Path traversal in SAP Manufacturing Execution
- CVE-2022-39801 Auth bypass in SAP GRC Access Control Emergency Access Management
- CVE-2022-39800 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (BI LaunchPad)
- CVE-2022-3980 XML external entity in Sophos Mobile managed on-premises
- CVE-2022-39799 Cross-site scripting in SAP NetWeaver AS ABAP (SAP GUI for HTML within the Fiori Launchpad)
- CVE-2022-3979 NagVis CoreLogonMultisite.php checkAuthCookie type conversion
- CVE-2022-3978 NodeBB abort cross-site request forgery
- CVE-2022-3977 Use after free in Kernel
- CVE-2022-3976 MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal
- CVE-2022-3975 NukeViet CMS Data URL Request.php filterAttr cross site scripting
- CVE-2022-3974 Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflow
- CVE-2022-3973 Pingkon HMS-PHP Data Pump Metadata admin.php sql injection
- CVE-2022-3972 Pingkon HMS-PHP adminlogin.php sql injection
- CVE-2022-3971 matrix-appservice-irc PgDataStore.ts sql injection
- CVE-2022-3970 LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow
- CVE-2022-3969 OpenKM FileUtils.java getFileExtension temp file
- CVE-2022-3968 emlog article_save.php cross site scripting
- CVE-2022-3967 Vesta Control Panel sed main.sh argument injection
- CVE-2022-3966 Ultimate Member Plugin Template class-shortcodes.php load_template pathname traversal
- CVE-2022-3965 ffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds
- CVE-2022-3964 ffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-bounds
- CVE-2022-3963 gnuboard5 FAQ Key ID faq.php cross site scripting
- CVE-2022-3962 Kiali: error message spoofing in kiali ui
- CVE-2022-3961 Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure
- CVE-2022-3960 Code injection in Pentaho Business Analytics Server
- CVE-2022-3959 drogon Session Hash small space of random values
- CVE-2022-3958 Potential XSS on personal menu navigation
- CVE-2022-3957 GPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leak
- CVE-2022-3956 tsruban HHIMS Patient Portrait sql injection
- CVE-2022-3955 tholum crm42 Login class.user.php sql injection
- CVE-2022-3952 ManyDesigns Portofino WarFileLauncher.java createTempDir temp file
- CVE-2022-3950 sanluan PublicCMS Tab dwz.min.js initLink cross site scripting
- CVE-2022-3949 Sourcecodester Simple Cashiering System User Account cross site scripting
- CVE-2022-3948 eolinker goku_lite getList sql injection
- CVE-2022-3947 eolinker goku_lite list sql injection
- CVE-2022-3946 Welcart e-Commerce < 2.8.4 - Subscriber+ Arbitrary Shipping Method Creation/Update/Deletion
- CVE-2022-3945 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
- CVE-2022-3944 jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload
- CVE-2022-3943 ForU CMS cms_chip.php cross site scripting
- CVE-2022-39429 Denial of service in Database - Enterprise Edition
- CVE-2022-39428 Other in Web Applications Desktop Integrator
- CVE-2022-39427 Other in VM VirtualBox
- CVE-2022-39426 Auth bypass in VM VirtualBox
- CVE-2022-39425 Auth bypass in VM VirtualBox
- CVE-2022-39424 Code injection in VM VirtualBox
- CVE-2022-39423 Information disclosure in VM VirtualBox
- CVE-2022-39422 Privilege escalation in VM VirtualBox
- CVE-2022-39421 Other in VM VirtualBox
- CVE-2022-39420 Other in Transportation Management
- CVE-2022-3942 SourceCodester Sanitization Management System cross site scripting
- CVE-2022-39419 Information disclosure in Database - Enterprise Edition
- CVE-2022-39417 Denial of service in Solaris Operating System
- CVE-2022-39412 Missing authorization in Access Manager
- CVE-2022-39411 Other in Transportation Management
- CVE-2022-39410 Denial of service in MySQL Server
- CVE-2022-3941 Activity Log Plugin HTTP Header neutralization for logs
- CVE-2022-39409 Denial of service in Transportation Management
- CVE-2022-39408 Denial of service in MySQL Server
- CVE-2022-39407 Information disclosure in PeopleSoft Enterprise PT PeopleTools
- CVE-2022-39406 Missing authorization in PeopleSoft Enterprise CC Common Application Objects
- CVE-2022-39405 Missing authorization in Access Manager
- CVE-2022-39404 Other in MySQL Installer
- CVE-2022-39403 Other in MySQL Server
- CVE-2022-39402 Information disclosure in MySQL Server
- CVE-2022-39401 Denial of service in Solaris Operating System
- CVE-2022-39400 Denial of service in MySQL Server
- CVE-2022-3940 lanyulei ferry task.go path traversal
- CVE-2022-39399 Other in Java SE JDK and JRE
- CVE-2022-39398 InfotelGLPI vulnerable to Cross-site Scripting
- CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client
- CVE-2022-39396 Parse Server vulnerable to Remote Code Execution via prototype pollution in MongoDB BSON parser
- CVE-2022-39395 Vela Insecure Defaults
- CVE-2022-39394 wasmtime_trap_code C API function has out of bounds write vulnerability
- CVE-2022-39393 Wasmtime vulnerable to data leakage between instances in the pooling allocator
- CVE-2022-39392 Wasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration
- CVE-2022-3939 lanyulei ferry API file.go path traversal
- CVE-2022-39389 Witness Block Parsing DoS Vulnerability in lnd
- CVE-2022-39388 Istio may allow identity impersonation if user has localhost access
- CVE-2022-39387 XWiki OIDC Authenticator vulnerable to OpenID login bypass due to improper authentication
- CVE-2022-39386 fastify-websocket vulnerable to uncaught exception via crash on malformed packet
- CVE-2022-39385 Users erroneously and transparently added to private messages in Discourse
- CVE-2022-39384 OpenZeppelin Contracts initializer reentrancy may lead to double initialization
- CVE-2022-39383 SSRF vulnerability in KubeVela VelaUX APIServer
- CVE-2022-39382 NODE_ENV in Keystone defaults to development with esbuild
- CVE-2022-39381 Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp
- CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering
- CVE-2022-39379 Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
- CVE-2022-39378 Displaying user badges can leak topic titles to users that have no access to the topic
- CVE-2022-39377 sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow
- CVE-2022-39376 Improper input validation on emails links in GLPI
- CVE-2022-39375 Cross-Site Scripting (XSS) through public RSS feed in GLPI
- CVE-2022-39374 Synapse Denial of service due to incorrect application of event authorization rules during state resolution
- CVE-2022-39373 Stored Cross-Site Scripting (XSS) in entity name in GLPI