Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 265 of 437.
- CVE-2022-38284 SQL injection in jflyfox:jfinal cms
- CVE-2022-38283 SQL injection in jflyfox:jfinal cms
- CVE-2022-38282 SQL injection in jflyfox:jfinal cms
- CVE-2022-38281 SQL injection in jflyfox:jfinal cms
- CVE-2022-38280 SQL injection in jflyfox:jfinal cms
- CVE-2022-3828 Video Thumbnails <= 2.12.3 - Admin+ Stored XSS
- CVE-2022-38279 SQL injection in jflyfox:jfinal cms
- CVE-2022-38278 SQL injection in jflyfox:jfinal cms
- CVE-2022-38277 SQL injection in jflyfox:jfinal cms
- CVE-2022-38276 SQL injection in jflyfox:jfinal cms
- CVE-2022-38275 SQL injection in jflyfox:jfinal cms
- CVE-2022-38274 SQL injection in jflyfox:jfinal cms
- CVE-2022-38273 SQL injection in jflyfox:jfinal cms
- CVE-2022-38272 SQL injection in jflyfox:jfinal cms
- CVE-2022-3827 centreon Contact Groups Form formContactGroup.php sql injection
- CVE-2022-38269 SQL injection in school activity updates with sms notification project:school activity updates with sms notification
- CVE-2022-38268 SQL injection in school activity updates with sms notification project:school activity updates with sms notification
- CVE-2022-38267 SQL injection in school activity updates with sms notification project:school activity updates with sms notification
- CVE-2022-38266 Denial of service in debian:debian linux
- CVE-2022-38265 SQL injection in apartment visitor management system project:apartment visitor management system
- CVE-2022-38260 SQL injection in janobe:interview management system
- CVE-2022-3826 Huaxia ERP Retail Management list information disclosure
- CVE-2022-38258 Path traversal in dlink:dir-819 firmware
- CVE-2022-38256 Cross-site scripting in tastyigniter:tastyigniter
- CVE-2022-38255 SQL injection in janobe:interview management system
- CVE-2022-38254 Cross-site scripting in nagios:nagios xi
- CVE-2022-38251 Cross-site scripting in nagios:nagios xi
- CVE-2022-38250 SQL injection in nagios:nagios xi
- CVE-2022-3825 Huaxia ERP User Management sql injection
- CVE-2022-38249 Cross-site scripting in nagios:nagios xi
- CVE-2022-38248 Cross-site scripting in nagios:nagios xi
- CVE-2022-38247 Cross-site scripting in nagios:nagios xi
- CVE-2022-3824 WP Admin UI Customize < 1.5.13 - Admin+ Stored XSS
- CVE-2022-38238 Memory corruption in xpdf project:xpdf
- CVE-2022-38237 Memory corruption in xpdf project:xpdf
- CVE-2022-38236 Memory corruption in xpdf project:xpdf
- CVE-2022-38235 Memory corruption in xpdf project:xpdf
- CVE-2022-38234 Denial of service in xpdf project:xpdf
- CVE-2022-38233 Memory corruption in xpdf project:xpdf
- CVE-2022-38231 Memory corruption in xpdf project:xpdf
- CVE-2022-38230 Denial of service in xpdf project:xpdf
- CVE-2022-3823 Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS
- CVE-2022-38229 Memory corruption in xpdf project:xpdf
- CVE-2022-38228 Memory corruption in xpdf project:xpdf
- CVE-2022-38227 Memory corruption in xpdf project:xpdf
- CVE-2022-38223 Memory corruption in fedoraproject:fedora
- CVE-2022-38222 Use after free in xpdfreader:xpdf
- CVE-2022-38221 Memory corruption in the isle evrima project:the isle evrima
- CVE-2022-38220 Cross-site scripting in quest:kace systems management appliance
- CVE-2022-3822 Donations via PayPal < 1.9.9 - Admin+ Stored XSS
- CVE-2022-38216 Mapbox is vulnerable to Integer Overflow
- CVE-2022-38212 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)
- CVE-2022-38211 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)
- CVE-2022-38210 HTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only)
- CVE-2022-3821 Memory corruption in systemd
- CVE-2022-38209 Reflected XSS vulnerability in Portal for ArcGIS
- CVE-2022-38208 Unvalidated redirect in Portal for ArcGIS
- CVE-2022-38207 Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)
- CVE-2022-38206 Reflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)
- CVE-2022-38205 Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)
- CVE-2022-38204 Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)
- CVE-2022-38203 The allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only)
- CVE-2022-38202 BUG-000152121 - Directory traversal vulnerability in ArcGIS Server.
- CVE-2022-38201 An unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1.
- CVE-2022-38200 BUG-000142376 - Reflected Cross-Site Scripting (XSS) vulnerability in ArcGIS Server.
- CVE-2022-3820 Auth bypass in GitLab
- CVE-2022-38199 BUG-000144172 - Remote file download issue in ArcGIS Server
- CVE-2022-38198 BUG-000146513 - Reflected XSS vulnerability in ArcGIS Server
- CVE-2022-38197 BUG-000148347 Unvalidated redirect issues in ArcGIS Server.
- CVE-2022-38196 BUG-000150537 - ArcGIS Server has a local file inclusion (LFI) vulnerability
- CVE-2022-38195 BUG-000150540 - Reflected XSS vulnerability in ArcGIS Server
- CVE-2022-38194 Portal for ArcGIS system properties are not properly encrypted (10.8.1 only)
- CVE-2022-38193 Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)
- CVE-2022-38192 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.
- CVE-2022-38191 HTML injection vulnerability in Portal for ArcGIS
- CVE-2022-38190 Stored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps
- CVE-2022-3819 Missing authorization in GitLab
- CVE-2022-38189 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.
- CVE-2022-38188 Cross-site scripting in Portal for ArcGIS
- CVE-2022-38187 Prevent access to sharing/rest/content/features/analyze to unauthorized users
- CVE-2022-38186 Cross-site scripting in Portal for ArcGIS
- CVE-2022-38184 There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1
- CVE-2022-38183 Gitea allowed assignment of private issues
- CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free
- CVE-2022-38180 JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider
- CVE-2022-3818 Denial of service in GitLab
- CVE-2022-38179 JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack
- CVE-2022-38178 Memory leaks in EdDSA DNSSEC verification code
- CVE-2022-38177 Memory leak in ECDSA DNSSEC verification code
- CVE-2022-38176 Privilege escalation in ysoft:safeq
- CVE-2022-38172 Cross-site scripting in servicenow:servicenow
- CVE-2022-38171 Integer overflow in freedesktop:poppler
- CVE-2022-38170 Overly permissive umask for daemons
- CVE-2022-3817 Axiomatic Bento4 mp4mux memory leak
- CVE-2022-38168 Auth bypass in avaya:scopia pathfinder 10 pts firmware
- CVE-2022-38167 Cross-site scripting in nintex:workflow
- CVE-2022-38166 Denial of service in f-secure:elements endpoint protection
- CVE-2022-38165 Path traversal in withsecure:f-secure policy manager
- CVE-2022-38164 Other in f-secure:safe
- CVE-2022-38163 Other in f-secure:safe