Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 274 of 437.
- CVE-2022-36954 Missing authorization in veritas:netbackup
- CVE-2022-36953 Information disclosure in veritas:netbackup
- CVE-2022-36952 Hardcoded credentials in veritas:netbackup
- CVE-2022-36951 Other in veritas:netbackup
- CVE-2022-36950 Code injection in veritas:netbackup
- CVE-2022-3695 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation
- CVE-2022-36949 Privilege escalation in veritas:netbackup
- CVE-2022-36948 Cross-site scripting in veritas:netbackup
- CVE-2022-36947 Memory corruption in faststone:image viewer
- CVE-2022-36946 Denial of service in debian:debian linux
- CVE-2022-36945 Auth bypass in mazda:mazda firmware
- CVE-2022-36944 Scala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization
- CVE-2022-36943 Path traversal in SSZipArchive
- CVE-2022-3694 Syncee - Global Dropshipping < 1.0.10 - Authentication Token Disclosure
- CVE-2022-36938 Memory corruption in Redex
- CVE-2022-36937 Weak cryptography in HHVM
- CVE-2022-36934 Integer overflow in WhatsApp Business for Android
- CVE-2022-36930 Local Privilege Escalation in Zoom Rooms for Windows Installers
- CVE-2022-3693 Path traversal in FileOrbis File Management System
- CVE-2022-36929 Local Privilege Escalation in Zoom Rooms for Windows Clients
- CVE-2022-36928 Path Traversal in Zoom for Android Clients
- CVE-2022-36927 Local Privilege Escalation in Zoom Rooms for macOS Clients
- CVE-2022-36926 Local Privilege Escalation in Zoom Rooms for macOS Clients
- CVE-2022-36925 Insecure key generation for Zoom Rooms for macOS Clients
- CVE-2022-36924 Local Privilege Escalation in Zoom Rooms Installer for Windows
- CVE-2022-36923 Information disclosure in zohocorp:manageengine firewall analyzer
- CVE-2022-36922 Jenkins Lucene-Search Plugin vulnerable to reflected (XSS) cross-site scripting
- CVE-2022-36921 Missing permission check in Coverity Plugin allows capturing credentials
- CVE-2022-36920 Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)
- CVE-2022-36919 Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs
- CVE-2022-36918 Jenkins Buckminster Plugin does not perform a permission check in a method implementing form validation
- CVE-2022-36917 Jenkins Google Cloud Backup Plugin allows attackers with Overall/Read permission to request a manual backup.
- CVE-2022-36916 CSRF vulnerability in Jenkins Google Cloud Backup Plugin
- CVE-2022-36915 Jenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contents
- CVE-2022-36914 Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system
- CVE-2022-36913 Jenkins Openstack Heat Plugin does not perform permission checks in methods implementing form validation
- CVE-2022-36912 Missing permission checks in Jenkins openstack-heat Plugin
- CVE-2022-36911 CSRF vulnerability in Jenkins openstack-heat Plugin
- CVE-2022-36910 Lucene-Search Plugin does not perform permission checks in several HTTP endpoints
- CVE-2022-3691 DeepL Pro API Translation < 1.7.5 - API Key Disclosure
- CVE-2022-36909 Missing permission check in Jenkins OpenShift Deployer Plugin
- CVE-2022-36908 CSRF vulnerability in Jenkins OpenShift Deployer Plugin
- CVE-2022-36907 Missing permission check in Jenkins OpenShift Deployer Plugin
- CVE-2022-36906 CSRF vulnerability in Jenkins OpenShift Deployer Plugin
- CVE-2022-36905 Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin
- CVE-2022-36904 Jenkins Repository Connector Plugin does not perform a permission check in a method implementing form validation
- CVE-2022-36903 Jenkins Repository Connector Plugin allows attackers with Overall/Read permission to enumerate credentials IDs
- CVE-2022-36902 Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
- CVE-2022-36901 Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted
- CVE-2022-36900 Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure
- CVE-2022-3690 Popup Maker < 1.16.11 - Contributor+ Stored Cross Site Scripting
- CVE-2022-36899 Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin
- CVE-2022-36898 Jenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpoints
- CVE-2022-36897 Jenkins Compuware Xpediter Code Coverage Plugin Missing Authorization
- CVE-2022-36896 Jenkins Compuware Source Code Download is missing authorization
- CVE-2022-36895 Jenkins Compuware Topaz Utilities Plugin is missing authorization
- CVE-2022-36894 Arbitrary file write vulnerability in Jenkins CLIF Performance Testing plugin
- CVE-2022-36893 Jenkins rpmsign-plugin does not perform a permission check in a method implementing form validation
- CVE-2022-36892 Jenkins rhnpush-plugin does not perform a permission check in a method implementing form validation
- CVE-2022-36891 Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs
- CVE-2022-36890 Jenkins Deployer Framework Plugin vulnerable to Path Traversal
- CVE-2022-3689 HTML Forms < 1.3.25 - Admin+ SQLi
- CVE-2022-36889 Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment
- CVE-2022-36888 Jenkins HashiCorp Vault Plugin does not perform permission checks in several HTTP endpoints that perform Vault connection tests
- CVE-2022-36887 Jenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints
- CVE-2022-36886 External Monitor Job Type Plugin does not require POST requests for an HTTP endpoint
- CVE-2022-36885 Jenkins GitHub plugin uses weak webhook signature function
- CVE-2022-36884 Lack of authentication mechanism in Jenkins Git Plugin webhook
- CVE-2022-36883 Lack of authentication mechanism in Jenkins Git Plugin webhook
- CVE-2022-36882 Lack of authentication mechanism in Jenkins Git Plugin webhook
- CVE-2022-36881 Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
- CVE-2022-36880 Cross-site scripting in webmin:usermin
- CVE-2022-3688 WPQA < 5.9 - Follow/Unfollow via CSRF
- CVE-2022-36879 Memory corruption in debian:debian linux
- CVE-2022-36878 Information disclosure in Find My Mobile
- CVE-2022-36877 Information disclosure in Samsung Members
- CVE-2022-36876 Missing authorization in Samsung Pass
- CVE-2022-36875 Missing authorization in com.samsung.android.waterplugin
- CVE-2022-36874 Missing authorization in Waterplugin
- CVE-2022-36873 Information disclosure in com.samsung.android.waterplugin
- CVE-2022-36872 Missing authorization in Samsung Pay
- CVE-2022-36871 Missing authorization in Samsung Pay
- CVE-2022-36870 Missing authorization in Samsung Pay
- CVE-2022-36869 Missing authorization in com.android.providers.contacts
- CVE-2022-36868 Information disclosure in Samsung Mobile Devices
- CVE-2022-36867 Missing authorization in Editor Lite
- CVE-2022-36866 Missing authorization in Group Sharing
- CVE-2022-36865 Missing authorization in Group Sharing
- CVE-2022-36864 Missing authorization in Samsung Email
- CVE-2022-36863 Memory corruption in Samsung Mobile Devices
- CVE-2022-36862 Memory corruption in Samsung Mobile Devices
- CVE-2022-36861 Privilege escalation in Samsung Mobile Devices
- CVE-2022-36860 Memory corruption in Samsung Mobile Devices
- CVE-2022-3686 SDM600 API permission check
- CVE-2022-36859 Cross-site scripting in SmartTagPlugin
- CVE-2022-36858 Memory corruption in Samsung Mobile Devices
- CVE-2022-36857 Missing authorization in Samsung Mobile Devices
- CVE-2022-36856 Missing authorization in Samsung Mobile Devices
- CVE-2022-36855 Use after free in Samsung Mobile Devices
- CVE-2022-36854 Memory corruption in Samsung Mobile Devices