Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 264 of 437.
- CVE-2022-38410 Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2022-3841 Server-side request forgery in RHACM
- CVE-2022-38409 Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2022-38408 Adobe Illustrator Improper Input Validation Arbitrary code execution
- CVE-2022-38407 Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2022-38406 Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2022-38405 Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2022-38404 Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2022-38403 Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2022-38402 Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2022-38401 Adobe InCopy PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2022-38400 Information disclosure in Mailform Pro CGI
- CVE-2022-3840 Google Apps Login < 3.4.5 - Admin+ Stored XSS
- CVE-2022-38399 Auth bypass in SmaCam CS-QR10 and SmaCam Night Vision CS-QR20
- CVE-2022-38398 Server-Side Request Forgery Information Disclosure Vulnerability
- CVE-2022-38396 Privilege escalation in HP Factory Preinstalled Windows 10 20H2 Images
- CVE-2022-38395 Privilege escalation in HP Support Assistant
- CVE-2022-38394 Hardcoded credentials in CentreCOM AR260S V2
- CVE-2022-38393 Memory corruption in RT-AX82U
- CVE-2022-38392 Denial of service in *:5400rmp oem harddrive
- CVE-2022-38391 IBM Spectrum Control information disclosure
- CVE-2022-38390 Cross-site scripting in Business Automation Workflow
- CVE-2022-3839 Analytics for WP <= 1.5.1 - Admin+ Stored XSS
- CVE-2022-38389 IBM Tivoli Workload Scheduler XML external entity injection
- CVE-2022-38388 Missing authorization in Navigator Mobile
- CVE-2022-38387 Command injection in Cloud Pak for Security
- CVE-2022-38386 IBM Cloud Pak for Security information disclosure
- CVE-2022-38385 Other in Cloud Pak for Security
- CVE-2022-38383 IBM Cloud Pak for Security information disclosure
- CVE-2022-38382 IBM Cloud Pak for Security session fixation
- CVE-2022-38381 Security feature bypass in Fortinet FortiADC
- CVE-2022-38380 Missing authorization in Fortinet FortiOS
- CVE-2022-3838 WPUpper Share Buttons <= 3.42 - Admin+ Stored XSS
- CVE-2022-38379 Cross-site scripting in FortiSOAR
- CVE-2022-38378 Privilege escalation in FortiOS
- CVE-2022-38377 Missing authorization in FortiAnalyzer
- CVE-2022-38376 Cross-site scripting in FortiNAC
- CVE-2022-38375 Missing authorization in FortiNAC
- CVE-2022-38374 Cross-site scripting in Fortinet FortiADC
- CVE-2022-38373 Cross-site scripting in Fortinet FortiDeceptor
- CVE-2022-38372 Privilege escalation in Fortinet FortiTester
- CVE-2022-38371 Denial of service in APOGEE MBC (PPC) (BACnet)
- CVE-2022-38370 No authorization of DatabaseConnectController in grafana-connector.
- CVE-2022-3837 Uji Countdown < 2.3.1 - Admin+ Stored XSS
- CVE-2022-38369 Login check vulnerability by session Id
- CVE-2022-38368 Command injection in aviatrix:gateway
- CVE-2022-38367 Missing authorization in netic:user export for jira
- CVE-2022-38362 Docker Provider <3.0 RCE vulnerability in example dag
- CVE-2022-3836 Seed Social < 2.0.4 - Admin+ Stored XSS
- CVE-2022-38359 Cross-site request forgery in Eyes of Network
- CVE-2022-38358 Cross-site scripting in Eyes of Network
- CVE-2022-38357 Other in Eyes of Network Web
- CVE-2022-38356 WordPress Pearl Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-38355 Information disclosure in SVMPC1
- CVE-2022-38352 ThinkPHP deserialization vulnerability
- CVE-2022-38351 Privilege escalation in supremainc:biostar 2
- CVE-2022-3835 Kwayy HTML Sitemap < 4.0 - Admin+ Stored XSS
- CVE-2022-38349 Denial of service in freedesktop:poppler
- CVE-2022-38342 XML external entity in safe:fme server
- CVE-2022-38341 Other in safe:fme server
- CVE-2022-38340 Path traversal in safe:fme server
- CVE-2022-3834 Google Forms <= 0.95 - Admin+ Stored XSS
- CVE-2022-38339 Cross-site scripting in safe:fme server
- CVE-2022-38337 Denial of service in mobatek:mobaxterm
- CVE-2022-38336 Auth bypass in mobatek:mobaxterm
- CVE-2022-38335 Cross-site scripting in vtiger:vtiger crm
- CVE-2022-38334 Denial of service in xpdfreader:xpdf
- CVE-2022-38333 Memory corruption in openwrt:openwrt
- CVE-2022-3833 Fancier Author Box by ThematoSoup <= 1.4 - Admin+ Stored XSS
- CVE-2022-38329 Cross-site request forgery in shopxian:shopxian cms
- CVE-2022-38326 Memory corruption in tendacn:ac15 firmware
- CVE-2022-38325 Memory corruption in tendacn:ac15 firmware
- CVE-2022-38323 File upload in event management system project:event management system
- CVE-2022-3832 External Media < 1.0.36 - Admin+ Stored XSS
- CVE-2022-38314 Memory corruption in tenda:ac18 firmware
- CVE-2022-38313 Memory corruption in tenda:ac18 firmware
- CVE-2022-38312 Memory corruption in tenda:ac18 firmware
- CVE-2022-38311 Memory corruption in tenda:ac18 firmware
- CVE-2022-38310 Memory corruption in tenda:ac18 firmware
- CVE-2022-3831 reCAPTCHA <= 1.6 - Admin+ Stored XSS
- CVE-2022-38309 Memory corruption in tenda:ac18 firmware
- CVE-2022-38308 Command injection in totolink:a7000ru firmware
- CVE-2022-38307 LIEF contains segmentation violation
- CVE-2022-38306 LIEF vulnerable to heap based buffer overflow
- CVE-2022-38305 File upload in aerocms project:aerocms
- CVE-2022-38304 SQL injection in online leave management system project:online leave management system
- CVE-2022-38303 SQL injection in online leave management system project:online leave management system
- CVE-2022-38302 SQL injection in online leave management system project:online leave management system
- CVE-2022-38301 Path traversal in onedev project:onedev
- CVE-2022-3830 WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site
- CVE-2022-38299 Server-side request forgery in appsmith:appsmith
- CVE-2022-38298 Server-side request forgery in appsmith:appsmith
- CVE-2022-38297 Auth bypass in ucms project:ucms
- CVE-2022-38296 File upload in cuppacms:cuppacms
- CVE-2022-38295 Cross-site scripting in cuppacms:cuppacms
- CVE-2022-38292 Server-side request forgery in slims:senayan library management system
- CVE-2022-38291 Cross-site scripting in slims:senayan library management system
- CVE-2022-3829 Font Awesome 4 Menus <= 4.7.0 - Admin+ Stored XSS
- CVE-2022-38286 SQL injection in jflyfox:jfinal cms
- CVE-2022-38285 SQL injection in jflyfox:jfinal cms