Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 269 of 437.
- CVE-2022-3782 Keycloak vulnerable to path traversal via double URL encoding
- CVE-2022-37819 Memory corruption in tenda:ax1803 firmware
- CVE-2022-37818 Memory corruption in tenda:ax1803 firmware
- CVE-2022-37817 Memory corruption in tenda:ax1803 firmware
- CVE-2022-37816 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37815 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37814 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37813 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37812 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37811 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37810 Command injection in tenda:ac1206 firmware
- CVE-2022-3781 Information disclosure in Devolutions Server
- CVE-2022-37809 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37808 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37807 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37806 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37805 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37804 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37803 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37802 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37801 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37800 Memory corruption in tenda:ac1206 firmware
- CVE-2022-3780 Missing authorization in Remote Desktop Manager
- CVE-2022-37799 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37798 Memory corruption in tenda:ac1206 firmware
- CVE-2022-37797 Null dereference in debian:debian linux
- CVE-2022-37796 Cross-site scripting in oretnom23:simple online book store system
- CVE-2022-37794 SQL injection in library management system project:library management system
- CVE-2022-37787 Cross-site scripting in wecube-platform project:wecube-platform
- CVE-2022-37786 Code injection in wecube-platform project:wecube-platform
- CVE-2022-37785 Information disclosure in wecube-platform project:wecube-platform
- CVE-2022-37783 Craft CMS discloses password hashes
- CVE-2022-37781 Memory corruption in fdkaac project:fdkaac
- CVE-2022-37780 Command injection in phicomm:fir151b firmware
- CVE-2022-37779 Command injection in phicomm:fir151b firmware
- CVE-2022-37778 Command injection in phicomm:fir151b firmware
- CVE-2022-37777 Command injection in phicomm:fir151b firmware
- CVE-2022-37775 Cross-site scripting in genesys:pureconnect
- CVE-2022-37774 Auth bypass in maarch:maarch rm
- CVE-2022-37773 SQL injection in maarch:maarch rm
- CVE-2022-37772 Auth bypass in maarch:maarch rm
- CVE-2022-37771 Privilege escalation in iobit:malware fighter
- CVE-2022-37770 Memory corruption in jpeg:libjpeg
- CVE-2022-37769 Memory corruption in jpeg:libjpeg
- CVE-2022-37768 Denial of service in jpeg:libjpeg
- CVE-2022-37767 Pebble Templates protection mechanism bypass can lead to arbitrary code execution
- CVE-2022-3776 Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.1 - Cross-Site Request Forgery
- CVE-2022-3775 Memory corruption in grub2
- CVE-2022-3774 SourceCodester Train Scheduler App resource injection
- CVE-2022-37734 graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources
- CVE-2022-37731 Cross-site scripting in ftcms:ftcms
- CVE-2022-37730 Cross-site request forgery in ftcms:ftcms
- CVE-2022-37724 Project Wonder WebObjects vulnerable to Arbitrary HTTP Header Injection and Cross-site Scripting
- CVE-2022-37721 PyroCMS vulnerable to stored Cross Site Scripting
- CVE-2022-37720 Cross-site scripting in orchardcore:orchard cms
- CVE-2022-37719 Cross-site request forgery in edgenexus:application delivery controller
- CVE-2022-37718 Command injection in edgenexus:application delivery controller
- CVE-2022-37710 Hardcoded credentials in pattersondental:eaglesoft
- CVE-2022-3771 easyii CMS File Upload Management Upload.php file unrestricted upload
- CVE-2022-37709 Auth bypass in tesla:model 3 firmware
- CVE-2022-37706 Privilege escalation in enlightenment:enlightenment
- CVE-2022-37705 Privilege escalation in zmanda:amanda
- CVE-2022-37704 Privilege escalation in zmanda:amanda
- CVE-2022-37703 Information disclosure in amanda:amanda
- CVE-2022-37700 Path traversal in easycorp:zentao
- CVE-2022-3770 Yunjing CMS upload_img.html unrestricted upload
- CVE-2022-3769 OWM Weather < 5.6.9 - Contributor+ SQLi
- CVE-2022-37681 Path traversal in hitachi:hc-ip9100hd firmware
- CVE-2022-37680 Auth bypass in hitachi:hc-ip9100hd firmware
- CVE-2022-3768 WPSmartContracts < 1.3.12 - Author+ SQLi
- CVE-2022-37679 Cross-site scripting in miniblog.core project:miniblog.core
- CVE-2022-3767 Information disclosure in DAST
- CVE-2022-37661 Command injection in adtran:sr506n firmware
- CVE-2022-37660 Weak cryptography in w1.fi:hostapd
- CVE-2022-3766 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
- CVE-2022-3765 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2022-3764 Form Vibes < 1.4.5 - Admin+ SQLi
- CVE-2022-3763 Booster for WooCommerce - Checkout Files Deletion via CSRF
- CVE-2022-37623 thlorenz browserify-shim vulnerable to prototype pollution
- CVE-2022-37621 thlorenz browserify-shim vulnerable to prototype pollution
- CVE-2022-37620 kangax html-minifier REDoS vulnerability
- CVE-2022-3762 Booster for WooCommerce - ShopManager+ Arbitrary File Download
- CVE-2022-37617 thlorenz browserify-shim vulnerable to prototype pollution
- CVE-2022-37616 Withdrawn: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldom
- CVE-2022-37614 mockery is vulnerable to prototype pollution
- CVE-2022-37611 tschaub gh-pages vulnerable to prototype pollution
- CVE-2022-3761 Weak cryptography in OpenVPN Connect
- CVE-2022-37609 Code injection in js-beautify project:js-beautify
- CVE-2022-37603 loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable
- CVE-2022-37602 Grunt-karma vulnerable to prototype pollution
- CVE-2022-37601 Prototype pollution in webpack loader-utils
- CVE-2022-3760 SQLi in Mia-Med
- CVE-2022-37599 loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)
- CVE-2022-37598 Code injection in uglifyjs project:uglifyjs
- CVE-2022-3759 Denial of service in GitLab
- CVE-2022-3758 Missing authorization in GitLab
- CVE-2022-3754 Weak Password Requirements in thorsten/phpmyfaq
- CVE-2022-3753 Evaluate <= 1.0 - Admin+ Stored Cross-Site Scripting
- CVE-2022-3752 Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack
- CVE-2022-3751 SQL Injection in owncast/owncast