Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 259 of 437.
- CVE-2022-39084 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-39083 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-39082 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-39081 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-39080 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-3908 Helloprint < 1.4.7 - Reflected Cross-Site Scripting
- CVE-2022-39075 Missing authorization in ZTE Blade A52, ZTE Blade A51, ZTE Blade A3 Lite, ZTE Blade A5 2020, ZTE Blade L210, ZTE Blade A7s, ZTE Blade A31, ZTE Blade A31 Plus, ZTE Blade A5 (2019), ZTE Blade A71, ZTE Blade A72, ZTE Blade V20 Smart, ZTE Blade V30, ZTE Blade V30 Vita, ZTE V40 Pro, ZTE Blade V40 Vita, ZTE Axon 40 Ultra
- CVE-2022-39074 Missing authorization in ZTE Blade A52, ZTE Blade A51, ZTE Blade A3 Lite, ZTE Blade A5 2020, ZTE Blade L210, ZTE Blade A7s, ZTE Blade A31, ZTE Blade A31 Plus, ZTE Blade A5 (2019), ZTE Blade A71, ZTE Blade A72, ZTE Blade V20 Smart, ZTE Blade V30, ZTE Blade V30 Vita, ZTE V40 Pro, ZTE Blade V40 Vita, ZTE Axon 40 Ultra
- CVE-2022-39073 Command injection in MF286R
- CVE-2022-39072 SQL injection in MF286R,MF289D
- CVE-2022-39071 Missing authorization in ZTE Blade A52, ZTE Blade A51, ZTE Blade A3 Lite, ZTE Blade A5 2020, ZTE Blade L210, ZTE Blade A7s, ZTE Blade A31, ZTE Blade A31 Plus, ZTE Blade A5 (2019), ZTE Blade A71, ZTE Blade A72, ZTE Blade V20 Smart, ZTE Blade V30, ZTE Blade V30 Vita, ZTE V40 Pro, ZTE Blade V40 Vita, ZTE Axon 40 Ultra
- CVE-2022-39070 Missing authorization in ZXA10 C3XX
- CVE-2022-3907 Clerk < 4.0.0 - Authentication Bypass and API Keys Disclosure
- CVE-2022-39069 SQL injection in ZAIP-AIE
- CVE-2022-39068 Buffer Overflow Vulnerability in ZTE MF296R
- CVE-2022-39067 Memory corruption in MF286R
- CVE-2022-39066 SQL injection in MF286R
- CVE-2022-39065 Denial of service in TRÅDFRI gateway system
- CVE-2022-39064 Denial of service in TRÅDFRI smart lighting system
- CVE-2022-39063 Memory corruption in Open5GS
- CVE-2022-39062 Misconfiguration in SICAM TOOLBOX II
- CVE-2022-39061 ChangingTec MegaServiSignAdapter - Out-of-bounds Read
- CVE-2022-39060 ChangingTec MegaServiSignAdapter - Improper Input Validation
- CVE-2022-3906 Easy Form Builder < 3.4.0 - Admin+ Stored XSS
- CVE-2022-39059 ChangingTec MegaServiSignAdapter - Path Traversal
- CVE-2022-39058 Changing Information Technology Inc. RAVA certificate validation system - Path Traversal
- CVE-2022-39057 Changing Information Technology Inc. RAVA certificate validation system - Command Injection
- CVE-2022-39056 Changing Information Technology Inc. RAVA certificate validation system - SQL Injection
- CVE-2022-39055 Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)
- CVE-2022-39054 COWELL INFORMATION SYSTEM CO., LTD. enterprise travel management system - Reflected XSS
- CVE-2022-39053 HEIMAVISTA INC. Rpage - Reflected XSS
- CVE-2022-39052 DoS attack using email
- CVE-2022-39051 Perl Code execution in Template Toolkit
- CVE-2022-39050 Possible XSS stored in customer information
- CVE-2022-39049 Possible XSS in Admin Interface
- CVE-2022-39048 Cross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirect
- CVE-2022-39047 Memory corruption in freeciv:freeciv
- CVE-2022-39046 Information disclosure in gnu:glibc
- CVE-2022-39045 Path traversal in QUARTZ-GOLD
- CVE-2022-39044 Command injection in Buffalo network devices
- CVE-2022-39043 Juiker app - Information Leakage
- CVE-2022-39042 aEnrich a+HRD - Improper Authentication
- CVE-2022-39041 aEnrich a+HRD - SQL Injection
- CVE-2022-39040 aEnrich a+HRD - Path Traversal
- CVE-2022-3904 MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics
- CVE-2022-39039 aEnrich a+HRD - Server-Side Request Forgery (SSRF)
- CVE-2022-39038 FLOWRING Agentflow BPM - Broken Access Control
- CVE-2022-39037 FLOWRING Agentflow BPM - Path Traversal
- CVE-2022-39036 FLOWRING Agentflow BPM - Arbitrary File Upload
- CVE-2022-39035 Smart eVision - Stored XSS
- CVE-2022-39034 Smart eVision - Path Traversal -2
- CVE-2022-39033 Smart eVision - Path Traversal -1
- CVE-2022-39032 Smart eVision - Improper Privilege Management
- CVE-2022-39031 Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -3
- CVE-2022-39030 Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -2
- CVE-2022-3903 Denial of service in Kernel
- CVE-2022-39029 Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -1
- CVE-2022-39028 Null dereference in debian:debian linux
- CVE-2022-39027 e-Excellence Inc. U-Office Force - Stored XSS
- CVE-2022-39026 e-Excellence Inc. U-Office Force - Stored XSS
- CVE-2022-39025 e-Excellence Inc. U-Office Force - Reflected XSS
- CVE-2022-39024 e-Excellence Inc. U-Office Force - Reflected XSS
- CVE-2022-39023 e-Excellence Inc. U-Office Force - Path Traversal
- CVE-2022-39022 e-Excellence Inc. U-Office Force - Path Traversal
- CVE-2022-39021 e-Excellence Inc. U-Office Force - Open Redirect
- CVE-2022-39020 Cross-site scripting in Schoolbox version 21.0.2, by Schoolbox Pty Ltd
- CVE-2022-3902 Information disclosure in GitLab
- CVE-2022-39019 Broken access controls on PDFtron WebviewerUI in M-Files Hubshare
- CVE-2022-39018 Broken access controls on PDFtron data in M-Files Hubshare
- CVE-2022-39017 XSS in all comments fields in M-Files Hubshare
- CVE-2022-39016 Javascript injection in PDFtron in M-Files Hubshare
- CVE-2022-39015 Information disclosure in SAP BusinessObjects Business Intelligence Platform (AdminTools/Query Builder)
- CVE-2022-39014 Information disclosure in SAP BusinessObjects Business Intelligence Platform (CMC)
- CVE-2022-39013 Information disclosure in SAP BusinessObjects Business Intelligence Platform (Program Objects)
- CVE-2022-39012 Other in Aslan-AL10
- CVE-2022-39011 Security feature bypass in EMUI
- CVE-2022-39010 Missing authorization in EMUI
- CVE-2022-3901 Visioweb.js - Prototype Pollution can results in XSS
- CVE-2022-39009 Missing authorization in EMUI
- CVE-2022-39008 Deserialization in EMUI
- CVE-2022-39007 Privilege escalation in EMUI
- CVE-2022-39006 Race condition in EMUI
- CVE-2022-39005 Denial of service in EMUI
- CVE-2022-39004 Denial of service in EMUI
- CVE-2022-39003 Memory corruption in EMUI
- CVE-2022-39002 Memory corruption in HarmonyOS;EMUI;Magic UI
- CVE-2022-39001 Path traversal in EMUI
- CVE-2022-39000 Other in EMUI
- CVE-2022-3900 Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection
- CVE-2022-38999 Other in EMUI
- CVE-2022-38998 Memory corruption in EMUI
- CVE-2022-38997 Misconfiguration in EMUI
- CVE-2022-38996 Misconfiguration in EMUI
- CVE-2022-38995 Misconfiguration in EMUI
- CVE-2022-38994 Misconfiguration in EMUI
- CVE-2022-38993 Misconfiguration in EMUI
- CVE-2022-38992 Misconfiguration in EMUI
- CVE-2022-38991 Misconfiguration in EMUI
- CVE-2022-38990 Misconfiguration in EMUI
- CVE-2022-3899 3DPrint < 3.5.6.9 - Arbitrary File and Directory Deletion via CSRF