Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 266 of 437.
- CVE-2022-38162 Cross-site scripting in withsecure:f-secure policy manager
- CVE-2022-38161 Security feature bypass in gumstix:overo sbc
- CVE-2022-3816 Axiomatic Bento4 mp4decrypt memory leak
- CVE-2022-38156 Command injection in kratosdefense:spectralnet narrowband firmware
- CVE-2022-38155 Denial of service in samsung:mtower
- CVE-2022-38153 Memory corruption in wolfssl:wolfssl
- CVE-2022-38152 Memory corruption in wolfssl:wolfssl
- CVE-2022-38150 Denial of service in fedoraproject:fedora
- CVE-2022-3815 Axiomatic Bento4 mp4decrypt memory leak
- CVE-2022-38149 HashiCorp Consul Template could reveal Vault secret contents in error messages
- CVE-2022-38148 Blind SQL Injection via GridFieldSortableHeader
- CVE-2022-38147 XSS via uploaded gpx file
- CVE-2022-38146 URL XSS vulnerability due to outdated jquery in CMS
- CVE-2022-38145 Stored XSS in Compare Mode
- CVE-2022-38144 WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38143 Memory corruption in OpenImageIO
- CVE-2022-38142 Deserialization in InfraSuite Device Master
- CVE-2022-38141 WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control
- CVE-2022-38140 WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Upload
- CVE-2022-3814 Axiomatic Bento4 mp4decrypt memory leak
- CVE-2022-38139 WordPress RD Station plugin <= 5.2.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-38138 Memory corruption in Library: IEC 60870-6 (ICCP/Tase.2)
- CVE-2022-38137 WordPress Analytify plugin <= 4.2.2 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38136 Privilege escalation in Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel® Fortran Compiler for Windows before version 2022.2.1 for some Intel(R) oneAPI Toolkits
- CVE-2022-38135 WordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerability
- CVE-2022-38134 WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability
- CVE-2022-38133 Information disclosure in TeamCity
- CVE-2022-38132 Command injection in MR8300 Router
- CVE-2022-38131 Open redirect in RStudio Connect
- CVE-2022-38130 Path traversal in Keysight Technologies Sensor Management Server
- CVE-2022-3813 Axiomatic Bento4 mp4edit memory leak
- CVE-2022-38129 Path traversal in Keysight Technologies Sensor Management Server
- CVE-2022-38125 FTP Agent forwards traffic on inactive ports to LinkManager
- CVE-2022-38124 Unwanted debug tool
- CVE-2022-38123 Insufficient validation of plugin files
- CVE-2022-38122 POWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information
- CVE-2022-38121 POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials
- CVE-2022-38120 POWERCOM CO., LTD. UPSMON PRO - Path Traversal
- CVE-2022-3812 Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leak
- CVE-2022-38119 POWERCOM CO., LTD. UPSMON PRO - Broken Authentication
- CVE-2022-38118 HGiga OAKlouds - SQL Injection
- CVE-2022-38117 Juiker app - Hard-coded Credentials
- CVE-2022-38116 Le-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password
- CVE-2022-38115 Insecure Methods Vulnerability
- CVE-2022-38114 Client-Side Desync Vulnerability
- CVE-2022-38113 Information Disclosure Vulnerability
- CVE-2022-38112 Sensitive Information Disclosure Vulnerability
- CVE-2022-38111 SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- CVE-2022-38110 Reflected Cross-Site Scripting Vulnerability
- CVE-2022-3811 EU Cookie Law <= 3.1.6 - Admin+ Stored XSS
- CVE-2022-38108 SolarWinds Platform Deserialization of Untrusted Data
- CVE-2022-38107 Sensitive Data Disclosure Vulnerability
- CVE-2022-38106 Cross-Site Scripting Vulnerability in Serv-U Web Client
- CVE-2022-38105 Information disclosure in RT-AX82U
- CVE-2022-38104 WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability
- CVE-2022-38103 Privilege escalation in Intel(R) NUC Software Studio Service installer
- CVE-2022-38102 Denial of service in Intel(R) Converged Security and Management Engine
- CVE-2022-38101 Privilege escalation in Intel(R) NUC Chaco Canyon BIOS update software
- CVE-2022-38100 Contec Health CMS8000
- CVE-2022-3810 Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service
- CVE-2022-38099 Privilege escalation in Intel(R) NUC 11 Compute Elements
- CVE-2022-38097 Use after free in Foxit Reader
- CVE-2022-38096 There is a NULL pointer vulnerability in vmwgfx driver
- CVE-2022-38095 WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38094 Command injection in CentreCOM AR260S V2
- CVE-2022-38093 WordPress All in One SEO plugin <= 4.2.3.1 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-38090 Information disclosure in Intel(R) Processors with Intel(R) Software Guard Extensions (SGX)
- CVE-2022-3809 Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service
- CVE-2022-38089 Cross-site scripting in Exment
- CVE-2022-38088 Path traversal in QUARTZ-GOLD
- CVE-2022-38087 Information disclosure in Intel(R) Processors
- CVE-2022-38086 WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38085 WordPress Read more By Adam plugin <= 1.1.8 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38083 Information disclosure in Intel(R) Processors
- CVE-2022-38081 Auth bypass in OpenHarmony
- CVE-2022-38080 exceedone/exment and exceedone/laravel-admin Cross-site Scripting vulnerability
- CVE-2022-38079 WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38078 Command injection in Movable Type XMLRPC API
- CVE-2022-38077 WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-38076 Privilege escalation in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-38075 Cross-site request forgery in Mantenimiento web (WordPress plugin)
- CVE-2022-38074 WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
- CVE-2022-38073 WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties)
- CVE-2022-38072 ADMesh improper array index validation
- CVE-2022-38070 WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability
- CVE-2022-3807 Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption
- CVE-2022-38069 Contec Health CMS8000
- CVE-2022-38068 WordPress Export Post Info plugin <= 1.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-38067 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability
- CVE-2022-38066 Command injection in QUARTZ-GOLD
- CVE-2022-38065 Privilege escalation in OpenStack
- CVE-2022-38064 Auth bypass in OpenHarmony
- CVE-2022-38063 WordPress Social Login WP Plugin <= 5.0.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-38062 WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-38061 WordPress Export Post Info plugin <= 1.2.0 - Authenticated CSV Injection vulnerability
- CVE-2022-38060 OpenStack Kolla sudo privilege escalation vulnerability
- CVE-2022-3806 Bluetooth HCI Error Handling Double Free
- CVE-2022-38059 WordPress Access Code Feeder plugin <= 1.0.3 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38058 WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerability
- CVE-2022-38057 WordPress TH Advance Product Search plugin <= 1.2.1 - Unauthenticated Plugin Settings Reset vulnerability