Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 271 of 437.
- CVE-2022-37352 Memory corruption in PDF-XChange Editor
- CVE-2022-37351 Memory corruption in PDF-XChange Editor
- CVE-2022-37350 Memory corruption in PDF-XChange Editor
- CVE-2022-3735 seccome Ehoney signup access control
- CVE-2022-37349 Memory corruption in PDF-XChange Editor
- CVE-2022-37348 Memory corruption in Trend Micro Security (Consumer)
- CVE-2022-37347 Memory corruption in Trend Micro Security (Consumer)
- CVE-2022-37346 File upload in Product Image Bulk Upload Plugin
- CVE-2022-37345 Auth bypass in Intel(R) NUC Kits
- CVE-2022-37344 WordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerability
- CVE-2022-37343 Privilege escalation in Intel(R) Processors
- CVE-2022-37342 Cross-site scripting in Add Shortcodes Actions And Filters (WordPress plugin)
- CVE-2022-37341 Privilege escalation in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware
- CVE-2022-37340 Privilege escalation in Intel(R) QAT drivers for Windows
- CVE-2022-3734 Redis on Windows dbghelp.dll uncontrolled search path
- CVE-2022-37339 WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-37338 Cross-site scripting in Blossom Recipe Maker (WordPress plugin)
- CVE-2022-37337 Command injection in Orbi Router RBR750
- CVE-2022-37336 Privilege escalation in Intel(R) NUC
- CVE-2022-37335 WordPress Word Search Puzzles game plugin <= 2.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-37334 Privilege escalation in Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards
- CVE-2022-37333 exceedone/exment and exceedone/laravel-admin SQL Injection vulnerability
- CVE-2022-37332 Use after free in Foxit Reader
- CVE-2022-37331 Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
- CVE-2022-37330 WordPress WHA Crossword plugin <= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-3733 SourceCodester Web-Based Student Clearance System edit-admin.php sql injection
- CVE-2022-37329 Privilege escalation in Intel(R) Quartus(R) Prime Pro and Standard Edition software
- CVE-2022-37328 WordPress History Timeline plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-37327 Information disclosure in Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged
- CVE-2022-37326 Privilege escalation in docker:desktop
- CVE-2022-37325 Memory corruption in sangoma:asterisk
- CVE-2022-3732 seccome Ehoney set sql injection
- CVE-2022-37318 Cross-site scripting in rsa:archer
- CVE-2022-37317 Cross-site scripting in rsa:archer
- CVE-2022-37316 Missing authorization in rsa:archer
- CVE-2022-37315 graphql-go has infinite recursion in the type definition parser
- CVE-2022-37313 Server-side request forgery in open-xchange:open-xchange appsuite
- CVE-2022-37312 Denial of service in open-xchange:open-xchange appsuite
- CVE-2022-37311 Denial of service in open-xchange:open-xchange appsuite
- CVE-2022-37310 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2022-3731 seccome Ehoney token sql injection
- CVE-2022-37309 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2022-37308 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2022-37307 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2022-37306 Cross-site scripting in open-xchange:ox app suite
- CVE-2022-37305 Auth bypass in honda:honda firmware
- CVE-2022-37302 Memory corruption in EcoStruxure Control Expert
- CVE-2022-37301 Integer overflow in Legacy Modicon Quantum/Premium
- CVE-2022-37300 Auth bypass in EcoStruxure Control Expert
- CVE-2022-3730 seccome Ehoney falco sql injection
- CVE-2022-37299 Path traversal in shirne cms project:shirne cms
- CVE-2022-37298 Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control
- CVE-2022-37292 Memory corruption in tenda:ax12 firmware
- CVE-2022-37290 Null dereference in fedoraproject:fedora
- CVE-2022-3729 seccome Ehoney attack sql injection
- CVE-2022-3728 Security feature bypass in ThinkPad T14s Gen 3 BIOS
- CVE-2022-37266 steal vulnerable to Prototype Pollution via key variable in babel.js
- CVE-2022-37265 steal vulnerable to Prototype Pollution via alias variable
- CVE-2022-37264 steal vulnerable to Prototype Pollution via optionName variable
- CVE-2022-37262 steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments
- CVE-2022-37260 steal vulnerable to Regular Expression Denial of Service via input variable
- CVE-2022-3726 Cross-site scripting in GitLab
- CVE-2022-37259 steal Inefficient Regular Expression Complexity vulnerability via string variable
- CVE-2022-37258 steal vulnerable to Prototype Pollution
- CVE-2022-37257 steal vulnerable to Prototype Pollution via requestedVersion variable
- CVE-2022-37255 Hardcoded credentials in tp-link:tapo c310 firmware
- CVE-2022-37254 Cross-site scripting in dolphinphp project:dolphinphp
- CVE-2022-37253 Cross-site scripting in crime reporting system project:crime reporting system
- CVE-2022-37251 Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
- CVE-2022-37250 Craft CMS Stored Cross-site Scripting in User Addresses Title
- CVE-2022-3725 Memory corruption in Wireshark
- CVE-2022-37248 Craft CMS Cross site Scripting vulnerability
- CVE-2022-37247 Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page
- CVE-2022-37246 Craft CMS Cross-site Scripting vulnerability
- CVE-2022-37245 Cross-site scripting in altn:security gateway for email servers
- CVE-2022-37244 Cross-site scripting in altn:security gateway for email servers
- CVE-2022-37243 Cross-site scripting in altn:security gateway for email servers
- CVE-2022-37242 Other in altn:security gateway for email servers
- CVE-2022-37241 Cross-site scripting in altn:security gateway for email servers
- CVE-2022-37240 Other in altn:security gateway for email servers
- CVE-2022-3724 Denial of service in Wireshark
- CVE-2022-37239 Cross-site scripting in altn:security gateway for email servers
- CVE-2022-37238 Cross-site scripting in altn:security gateway for email servers
- CVE-2022-37237 Denial of service in zlmediakit:zlmediakit
- CVE-2022-37235 Memory corruption in netgear:r7000 firmware
- CVE-2022-37234 Memory corruption in netgear:r7000 firmware
- CVE-2022-37232 Memory corruption in netgear:wnr2000v4 firmware
- CVE-2022-3723 Google Chromium V8 Type Confusion
- CVE-2022-37223 SQL injection in jflyfox jfinal
- CVE-2022-3721 Code Injection in froxlor/froxlor
- CVE-2022-37209 SQL injection in jflyfox:jfinal cms
- CVE-2022-37208 SQL injection in jflyfox:jfinal cms
- CVE-2022-37207 SQL injection in jflyfox:jfinal cms
- CVE-2022-37205 SQL injection in jflyfox:jfinal cms
- CVE-2022-37204 SQL injection in jflyfox:jfinal cms
- CVE-2022-37203 SQL injection in jflyfox:jfinal cms
- CVE-2022-37202 SQL injection in jflyfox:jfinal cms
- CVE-2022-37201 SQL injection in jflyfox:jfinal cms
- CVE-2022-3720 Event Monster < 1.2.1 - Admin+ SQLi
- CVE-2022-37199 SQL injection in jflyfox jfinal