Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 261 of 437.
- CVE-2022-3881 WPTools < 3.43 - Subscriber+ Arbitrary Plugin Installation
- CVE-2022-38808 SQL injection in yimihome:ywoa
- CVE-2022-38803 Cross-site scripting in zkteco:biotime
- CVE-2022-38802 Cross-site scripting in zkteco:biotime
- CVE-2022-38801 Cross-site scripting in zkteco:biotime
- CVE-2022-3880 AntiHacker < 4.20 - Subscriber+ Arbitrary Plugin Installation
- CVE-2022-38796 Feehi CMS host header injection vulnerability
- CVE-2022-38795 Gitea erroneous repo clones
- CVE-2022-38794 Path traversal in zaver project:zaver
- CVE-2022-38792 exotel-py includes code execution backdoor inserted by a third party
- CVE-2022-38791 Denial of service in fedoraproject:fedora
- CVE-2022-38790 Cross-site scripting in weave.works:gitops
- CVE-2022-3879 Car Dealer < 3.05 - Subscriber+ Arbitrary Plugin Installation
- CVE-2022-38789 Missing authorization in airties:air 4920 firmware
- CVE-2022-38788 Weak cryptography in nokia:fastmile 5g receiver firmware
- CVE-2022-38787 Privilege escalation in Intel(R) FPGA products
- CVE-2022-38786 Privilege escalation in Intel Battery Life Diagnostic Tool software
- CVE-2022-38784 Integer overflow in debian:debian linux
- CVE-2022-3878 Maxon ERP browse_data sql injection
- CVE-2022-38779 Open redirect in kibana
- CVE-2022-38778 Denial of service in kibana
- CVE-2022-38777 Privilege escalation in Elastic Endpoint Security
- CVE-2022-38775 Privilege escalation in Elastic Endpoint Security
- CVE-2022-38774 Privilege escalation in Elastic Endpoint Security and Elastic Endgame Security
- CVE-2022-38773 Security feature bypass in SIMATIC Drive Controller CPU 1504D TF
- CVE-2022-38772 Code injection in zohocorp:manageengine netflow analyzer
- CVE-2022-38771 Cross-site scripting in transtek:mojodat fixed asset management
- CVE-2022-38770 Missing authorization in transtek:mojodat fixed asset management
- CVE-2022-3877 Click Studios Passwordstate URL Field cross site scripting
- CVE-2022-38769 Information disclosure in transtek:mojodat fixed asset management
- CVE-2022-38768 Auth bypass in transtek:mojodat fixed asset management
- CVE-2022-38767 Denial of service in windriver:vxworks
- CVE-2022-38766 Auth bypass in renault:zoe e-tech firmware
- CVE-2022-38765 Missing authorization in canon:vitrea view
- CVE-2022-38764 Misconfiguration in Trend Micro HouseCall (Consumer)
- CVE-2022-3876 Click Studios Passwordstate API authorization
- CVE-2022-38758 XSS vulnerabilities in iManager
- CVE-2022-38757 CVE-2022-38757 ZENworks
- CVE-2022-38756 CVE-2022-38756 vulnerability in GW Web prior to 18.4.2
- CVE-2022-38755 Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1
- CVE-2022-38754 CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)
- CVE-2022-38753 Auth bypass in NetIQ Advanced Authentication
- CVE-2022-38752 DoS in SnakeYAML
- CVE-2022-38751 DoS in SnakeYAML
- CVE-2022-38750 DoS in SnakeYAML
- CVE-2022-3875 Click Studios Passwordstate API authentication bypass by assumed-immutable data
- CVE-2022-38749 DoS in SnakeYAML
- CVE-2022-38745 Apache OpenOffice: Empty entry in Java class path
- CVE-2022-38744 FactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack
- CVE-2022-38743 Missing authorization in FactoryTalk VantagePoint
- CVE-2022-38742 Rockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack
- CVE-2022-3874 Os command injection via ct_command and fcct_command
- CVE-2022-38734 Denial of service in Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
- CVE-2022-38733 Auth bypass in OnCommand Insight
- CVE-2022-38732 Misconfiguration in SnapCenter
- CVE-2022-38731 Path traversal in qaelum:dose
- CVE-2022-38730 Race condition in docker:desktop
- CVE-2022-3873 Cross-site Scripting (XSS) - DOM in jgraph/drawio
- CVE-2022-38725 Integer overflow in oneidentity:syslog-ng
- CVE-2022-38724 Silverstripe XSS in shortcodes
- CVE-2022-38723 Gravitee API Management contains Path Traversal
- CVE-2022-3872 Memory corruption in QEMU
- CVE-2022-38716 WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-38715 Code injection in QUARTZ-GOLD
- CVE-2022-38714 IBM DataStage on Cloud Pak for Data information disclosure
- CVE-2022-38712 Auth bypass in IBM WebSphere Application Server
- CVE-2022-38710 IBM Robotic Process Automation information disclosure
- CVE-2022-38709 Cross-site scripting in Robotic Process Automation
- CVE-2022-38708 IBM Cognos Analytics server-side request forgery
- CVE-2022-38707 IBM Cognos Command Center information disclosure
- CVE-2022-38705 IBM CICS TX phishing
- CVE-2022-38704 WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38703 WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-38702 WordPress WP CSV Exporter Plugin <= 2.0 is vulnerable to CSV Injection
- CVE-2022-38701 Memory corruption in OpenHarmony
- CVE-2022-38700 Auth bypass in OpenHarmony
- CVE-2022-3870 Information disclosure in GitLab
- CVE-2022-38699 ASUS Armoury Crate Service - Arbitrary File Creation via Elevation of Privilege Flaw
- CVE-2022-38698 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38697 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38696 Memory corruption in SC9863A/T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/T750/T765
- CVE-2022-38695 Privilege escalation in SC9863A/T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/
- CVE-2022-38694 Memory corruption in SC9863A//T310/T610/T618/
- CVE-2022-38693 Memory corruption in SC9863A//T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/T750/T765
- CVE-2022-38692 Memory corruption in SC9863A/T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/
- CVE-2022-38691 Security feature bypass in SC9863A//T310/T610/T618/
- CVE-2022-38690 Race condition in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-3869 Code Injection in froxlor/froxlor
- CVE-2022-38689 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38688 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38687 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38686 Denial of service in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38685 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38684 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38683 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38682 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38681 Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38680 Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-3868 SourceCodester Sanitization Management System sql injection
- CVE-2022-38679 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000