Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 262 of 437.
- CVE-2022-38678 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38677 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38676 Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38675 Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38674 Denial of service in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38673 Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38672 Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38671 Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38670 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-3867 Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected
- CVE-2022-38669 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-38668 Information disclosure in crowcpp:crow
- CVE-2022-38667 Use after free in crowcpp:crow
- CVE-2022-38666 SSL/TLS certificate validation unconditionally disabled by Jenkins NS-ND Integration Performance Publisher Plugin
- CVE-2022-38665 RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin
- CVE-2022-38664 Cross-site Scripting in Jenkins Job Configuration History Plugin
- CVE-2022-38663 Improper masking of credentials Jenkins in Git Plugin
- CVE-2022-38662 HCL Digital Experience is susceptible to open redirects
- CVE-2022-38661 HCL Workload Automation is affected by a vulnerability in Jlog component of the Master Domain Manager
- CVE-2022-38660 HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability
- CVE-2022-3866 Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/
- CVE-2022-38659 HCL BigFix Platform is affected by insecure credential storage
- CVE-2022-38658 HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service
- CVE-2022-38657 An open redirect to malicious sites affects HCL Leap
- CVE-2022-38656 HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability
- CVE-2022-38655 HCL BigFix WebUI is affected by a missing-permission-check vulnerability
- CVE-2022-38654 HCL Domino is susceptible to an information disclosure vulnerability
- CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)
- CVE-2022-38652 Deserialization in vmware:hyperic agent
- CVE-2022-38651 Auth bypass in vmware:hyperic server
- CVE-2022-38650 Deserialization in vmware:hyperic server
- CVE-2022-3865 WP User Merger < 1.5.3 - Admin+ SQLi via ID
- CVE-2022-38649 Apache Airflow Pinot provider allowed Command Injection
- CVE-2022-38648 PDFTranscoder does not block external resources
- CVE-2022-3864 Security feature bypass in Relion 670/650/SAM600-IO Series
- CVE-2022-38639 Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting
- CVE-2022-38638 Casdoor arbitrary file write vulnerability
- CVE-2022-38637 SQL injection in hospital management system project:hospital management system
- CVE-2022-38633 Privilege escalation in genymobile:genymotion desktop
- CVE-2022-3863 Use after free in Chrome
- CVE-2022-38628 Cross-site scripting in niceforyou:linear emerge e3 access control firmware
- CVE-2022-38627 SQL injection in niceforyou:linear emerge e3 access control firmware
- CVE-2022-38625 Security feature bypass in patlite:nbm-d88n firmware
- CVE-2022-38621 Code injection in doufox:doufox
- CVE-2022-3862 Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS
- CVE-2022-38619 SQL injection in bpcbt:smartvista front-end
- CVE-2022-38618 SQL injection in bpcbt:smartvista
- CVE-2022-38617 SQL injection in bpcbt:smartvista
- CVE-2022-38616 SQL injection in bpcbt:smartvista front-end
- CVE-2022-38615 SQL injection in bpcbt:smartvista front-end
- CVE-2022-38614 Path traversal in bpcbt:smartvista cardgen
- CVE-2022-38613 Path traversal in bpcbt:smartvista cardgen
- CVE-2022-38611 Other in watchdog:anti-virus
- CVE-2022-38610 SQL injection in garage management system project:garage management system
- CVE-2022-3861 Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
- CVE-2022-38606 SQL injection in garage management system project:garage management system
- CVE-2022-38605 SQL injection in church management system project:church management system
- CVE-2022-38604 Path traversal in wacom:driver
- CVE-2022-38600 Denial of service in mplayerhq:mplayer
- CVE-2022-3860 Visual Email Designer for WooCommerce < 1.7.2 - Multiple Author+ SQLi
- CVE-2022-38599 Information disclosure in goteleport:teleport
- CVE-2022-38595 SQL injection in church management system project:church management system
- CVE-2022-38594 SQL injection in church management system project:church management system
- CVE-2022-3859 Privilege escalation in Trellix Agent
- CVE-2022-38583 Misconfiguration in sage:sage 300
- CVE-2022-38582 Missing authorization in watchdog:anti-virus
- CVE-2022-38580 Skipper vulnerable to SSRF via X-Skipper-Proxy
- CVE-2022-3858 Chaty < 3.0.3 - Admin+ SQLi
- CVE-2022-38577 Privilege escalation in processmaker:processmaker
- CVE-2022-38576 SQL injection in janobe:interview management system
- CVE-2022-38573 Memory corruption in 10-strike:network inventory explorer
- CVE-2022-38571 Memory corruption in tenda:m3 firmware
- CVE-2022-38570 Memory corruption in tenda:m3 firmware
- CVE-2022-38569 Memory corruption in tenda:m3 firmware
- CVE-2022-38568 Memory corruption in tenda:m3 firmware
- CVE-2022-38567 Memory corruption in tenda:m3 firmware
- CVE-2022-38566 Memory corruption in tenda:m3 firmware
- CVE-2022-38565 Memory corruption in tenda:m3 firmware
- CVE-2022-38564 Memory corruption in tenda:m3 firmware
- CVE-2022-38563 Memory corruption in tenda:m3 firmware
- CVE-2022-38562 Memory corruption in tenda:m3 firmware
- CVE-2022-3856 Comic Book Management System < 2.2.0 - Admin+ SQLi
- CVE-2022-38557 Hardcoded credentials in dlink:dir-845l firmware
- CVE-2022-38556 Hardcoded credentials in trendnet:tew733gr firmware
- CVE-2022-38555 Memory corruption in linksys:e1200 firmware
- CVE-2022-38553 Cross-site scripting in creativeitem:academy learning management system
- CVE-2022-38550 Cross-site scripting in jeesns:jeesns
- CVE-2022-3855 404 to Start <= 1.6.1 - Admin+ Stored XSS
- CVE-2022-38547 Command injection in ATP series firmware
- CVE-2022-38546 Misconfiguration in NBG7510 firmware
- CVE-2022-38545 Valine code injection vulnerability
- CVE-2022-38542 SQL injection in archerydms:archery
- CVE-2022-38541 SQL injection in archerydms:archery
- CVE-2022-38540 SQL injection in archerydms:archery
- CVE-2022-3854 Null dereference in ceph
- CVE-2022-38539 SQL injection in archerydms:archery
- CVE-2022-38538 SQL injection in archerydms:archery
- CVE-2022-38537 SQL injection in archerydms:archery
- CVE-2022-38535 Command injection in totolink:a720r firmware
- CVE-2022-38534 Command injection in totolink:a720r firmware