Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 260 of 437.
- CVE-2022-38989 Misconfiguration in EMUI
- CVE-2022-38988 Misconfiguration in EMUI
- CVE-2022-38987 Misconfiguration in EMUI
- CVE-2022-38986 Memory corruption in EMUI
- CVE-2022-38985 Other in EMUI
- CVE-2022-38984 Memory corruption in EMUI
- CVE-2022-38983 Use after free in EMUI
- CVE-2022-38982 Auth bypass in HarmonyOS
- CVE-2022-38981 Memory corruption in HarmonyOS
- CVE-2022-38980 Memory corruption in HarmonyOS
- CVE-2022-3898 WP Affiliate Platform <= 6.3.9 - Cross-Site Request Forgery
- CVE-2022-38979 Misconfiguration in EMUI
- CVE-2022-38978 Misconfiguration in EMUI
- CVE-2022-38977 Memory corruption in HarmonyOS
- CVE-2022-38975 EC-CUBE DOM-based cross-site scripting vulnerability
- CVE-2022-38974 WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability
- CVE-2022-38973 Missing authorization in Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition
- CVE-2022-38972 Cross-site scripting in A-Form
- CVE-2022-38971 WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-38970 Weak cryptography in hipcam:realserver
- CVE-2022-3897 WP Affiliate Platform <= 6.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2022-3896 WP Affiliate Platform <= 6.3.9 - Reflected Cross-Site Scripting
- CVE-2022-38956 Security feature bypass in netgear:wpn824ext firmware
- CVE-2022-38955 Security feature bypass in netgear:wpn824ext firmware
- CVE-2022-3895 Potential XSS in common user interface component library
- CVE-2022-38947 SQL injection in jigar-sable:flipkart-clone-php
- CVE-2022-38946 File upload in divscorp:doctor-appointment
- CVE-2022-3894 WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
- CVE-2022-38936 Memory corruption in pbc project:pbc
- CVE-2022-38935 Privilege escalation in niter:niterforum
- CVE-2022-38934 Memory corruption in toaruos:toaruos
- CVE-2022-38932 Memory corruption in toaruos:toaruos
- CVE-2022-38931 Server-side request forgery in baijiacms project:baijiacms
- CVE-2022-3893 Potential XSS on custom menu navigation
- CVE-2022-38928 Null dereference in xpdfreader:xpdf
- CVE-2022-38923 SQL injection in iss-oberlausitz:bluepage cms
- CVE-2022-38922 SQL injection in iss-oberlausitz:bluepage cms
- CVE-2022-3892 WP OAuth Server < 4.2.2 - Admin+ Stored XSS
- CVE-2022-38916 Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
- CVE-2022-3891 WP FullCalendar < 1.5 - Unauthenticated Arbitrary Post Access
- CVE-2022-38902 Cross-site scripting in liferay:dxp
- CVE-2022-38901 Cross-site scripting in liferay:dxp
- CVE-2022-38900 decode-uri-component vulnerable to Denial of Service (DoS)
- CVE-2022-3890 Memory corruption in Chrome
- CVE-2022-38890 Memory corruption in f5:njs
- CVE-2022-3889 Memory corruption in Chrome
- CVE-2022-38887 Supply chain in d8s-python project:d8s-python
- CVE-2022-38886 Supply chain in d8s-xml project:d8s-xml
- CVE-2022-38885 Supply chain in d8s-netstrings project:d8s-netstrings
- CVE-2022-38884 Supply chain in d8s-grammars project:d8s-grammars
- CVE-2022-38883 Supply chain in d8s-math project:d8s-math
- CVE-2022-38882 Supply chain in d8s-json project:d8s-json
- CVE-2022-38881 Supply chain in d8s-archives project:d8s-archives
- CVE-2022-38880 Supply chain in democritus urls project:democritus urls
- CVE-2022-3888 Use after free in Chrome
- CVE-2022-38878 SQL injection in school activity updates with sms notification project:school activity updates with sms notification
- CVE-2022-38877 File upload in garage management system project:garage management system
- CVE-2022-38873 Security feature bypass in dlink:dap-2310 firmware
- CVE-2022-38871 Free5gc vulnerable to uncontrolled resource consumption
- CVE-2022-38870 Information disclosure in free5gc:free5gc
- CVE-2022-3887 Use after free in Chrome
- CVE-2022-38868 SQL injection in ehoney project:ehoney
- CVE-2022-38867 rttys SQL Injection vulnerability
- CVE-2022-38866 Memory corruption in debian:debian linux
- CVE-2022-38865 Denial of service in debian:debian linux
- CVE-2022-38864 Memory corruption in debian:debian linux
- CVE-2022-38863 Memory corruption in debian:debian linux
- CVE-2022-38862 Memory corruption in mplayerhq:mencoder
- CVE-2022-38861 Memory corruption in debian:debian linux
- CVE-2022-38860 Denial of service in debian:debian linux
- CVE-2022-3886 Use after free in Chrome
- CVE-2022-38858 Memory corruption in debian:debian linux
- CVE-2022-38856 Memory corruption in mplayerhq:mencoder
- CVE-2022-38855 Memory corruption in debian:debian linux
- CVE-2022-38853 Memory corruption in mplayerhq:mencoder
- CVE-2022-38851 Memory corruption in debian:debian linux
- CVE-2022-38850 Denial of service in debian:debian linux
- CVE-2022-3885 Use after free in Chrome
- CVE-2022-38846 Information disclosure in espocrm:espocrm
- CVE-2022-38845 Cross-site scripting in espocrm:espocrm
- CVE-2022-38844 Code injection in espocrm:espocrm
- CVE-2022-38843 File upload in espocrm:espocrm
- CVE-2022-38841 Command injection in linksys:e8450 firmware
- CVE-2022-38840 XML external entity in guralp:man-eam-0003
- CVE-2022-3884 Directory Permission Vulnerability in Hitachi Ops Center Analyzer
- CVE-2022-38833 SQL injection in school activity updates with sms notification project:school activity updates with sms notification
- CVE-2022-38832 SQL injection in school activity updates with sms notification project:school activity updates with sms notification
- CVE-2022-38831 Memory corruption in tenda:rx9 pro firmware
- CVE-2022-38830 Memory corruption in tenda:rx9 pro firmware
- CVE-2022-3883 StopBadBots < 7.24 - Subscriber+ Arbitrary Plugin Installation
- CVE-2022-38829 Memory corruption in tenda:rx9 pro firmware
- CVE-2022-38828 Command injection in totolink:t6 firmware
- CVE-2022-38827 Memory corruption in totolink:t6 firmware
- CVE-2022-38826 Command injection in totolink:t6 firmware
- CVE-2022-38823 Hardcoded credentials in totolink:t6 firmware
- CVE-2022-3882 WP Memory < 2.46 - Subscriber+ Arbitrary Plugin Installation
- CVE-2022-38817 Dapr Dashboard vulnerable to Incorrect Access Control
- CVE-2022-38814 Cross-site scripting in fiberhome:an5506-02-b firmware
- CVE-2022-38813 Missing authorization in phpgurukul blood donor management system project:phpgurukul blood donor management system
- CVE-2022-38812 SQL injection in aerocms project:aerocms