Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 278 of 437.
- CVE-2022-36480 Memory corruption in totolink:n350rt firmware
- CVE-2022-36479 Command injection in totolink:n350rt firmware
- CVE-2022-36478 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36477 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36475 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36474 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36473 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36472 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36471 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36470 Memory corruption in h3c:b5 mini firmware
- CVE-2022-3647 Redis Crash Report debug.c sigsegvHandler denial of service
- CVE-2022-36469 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36468 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36467 Memory corruption in h3c:b5 mini firmware
- CVE-2022-36466 Memory corruption in totolink:a3700r firmware
- CVE-2022-36465 Memory corruption in totolink:a3700r firmware
- CVE-2022-36464 Memory corruption in totolink:a3700r firmware
- CVE-2022-36463 Memory corruption in totolink:a3700r firmware
- CVE-2022-36462 Memory corruption in totolink:a3700r firmware
- CVE-2022-36461 Command injection in totolink:a3700r firmware
- CVE-2022-36460 Command injection in totolink:a3700r firmware
- CVE-2022-3646 Linux Kernel BPF segment.c nilfs_attach_log_writer memory leak
- CVE-2022-36459 Command injection in totolink:a3700r firmware
- CVE-2022-36458 Command injection in totolink:a3700r firmware
- CVE-2022-36456 Command injection in totolink:a720r firmware
- CVE-2022-36455 Command injection in totolink:a3600r firmware
- CVE-2022-36454 Missing authorization in mitel:micollab
- CVE-2022-36453 Missing authorization in mitel:micollab
- CVE-2022-36452 File upload in mitel:micollab
- CVE-2022-36451 Server-side request forgery in mitel:micollab
- CVE-2022-36450 Code injection in obsidian:obsidian
- CVE-2022-36449 Use after free in arm:bifrost gpu kernel driver
- CVE-2022-36448 Memory corruption in insyde:insydeh2o
- CVE-2022-36447 chia-blockchain tokens can be inflated to an arbitrary extent
- CVE-2022-36446 Cross-site scripting in webmin:webmin
- CVE-2022-36444 Other in atos:unify openscape bcf
- CVE-2022-36443 Security feature bypass in zebra:enterprise home screen
- CVE-2022-36442 Security feature bypass in zebra:enterprise home screen
- CVE-2022-36441 Security feature bypass in zebra:enterprise home screen
- CVE-2022-36440 Denial of service in debian:debian linux
- CVE-2022-3644 Plaintext storage of tokens in pulp_ansible
- CVE-2022-36439 Privilege escalation in asus:asusliveupdate
- CVE-2022-36438 Misconfiguration in asus:asusswitch
- CVE-2022-36437 Hazelcast connection caching
- CVE-2022-36436 VNCAuthProxy authentication bypass vulnerability
- CVE-2022-36433 Cross-site scripting in amasty:amasty blog pro
- CVE-2022-36432 Cross-site scripting in amasty:blog pro
- CVE-2022-36431 File upload in rocketsoftware:trufusion
- CVE-2022-3643 Denial of service in Linux
- CVE-2022-36429 Command injection in Orbi Satellite RBS750
- CVE-2022-36428 WordPress Rock Convert plugin <= 2.11.0 - Auth. Cross-Site Scripting (XSS) vulnerability
- CVE-2022-36427 WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability
- CVE-2022-36425 WordPress Beaver Builder plugin <= 2.5.4.3 - Broken Access Control vulnerability
- CVE-2022-36424 WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-36423 Denial of service in OpenHarmony
- CVE-2022-36422 WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition
- CVE-2022-36418 WordPress HREFLANG Tags Lite Plugin <= 2.0.0 is vulnerable to Broken Authentication
- CVE-2022-36417 Cross-site request forgery in 3D Tag Cloud (WordPress plugin)
- CVE-2022-36416 Privilege escalation in Intel(R) Ethernet 500 Series Controller drivers for VMware
- CVE-2022-36415 Privilege escalation in scootersoftware:beyond compare
- CVE-2022-36414 Privilege escalation in scootersoftware:beyond compare
- CVE-2022-36413 Auth bypass in zohocorp:manageengine adselfservice plus
- CVE-2022-36412 Auth bypass in zohocorp:manageengine supportcenter plus
- CVE-2022-3641 Privilege escalation in Remote Desktop Manager
- CVE-2022-36407 Information Exposure Vulnerability in Hitachi Disk Array Systems
- CVE-2022-36405 WordPress amCharts: Charts and Maps plugin <= 1.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-36404 WordPress Simple SEO plugin <= 1.8.12 - Broken Access Control vulnerability
- CVE-2022-36403 Other in Installer of Device Software Manager
- CVE-2022-36402 There is an int overflow vulnerability in vmwgfx driver
- CVE-2022-36401 WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-36400 Path traversal in Intel(r) NUC Kit Wireless Adapter drivers for Windows 10
- CVE-2022-3640 Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free
- CVE-2022-36399 WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure
- CVE-2022-36398 Privilege escalation in Intel(R) Battery Life Diagnostic Tool software
- CVE-2022-36397 Misconfiguration in Intel(R) QAT drivers for Linux
- CVE-2022-36396 Privilege escalation in Intel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2022-36394 WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability
- CVE-2022-36392 Denial of service in Intel(R) AMT and Intel(R) Standard Manageability in Intel (R) CSME
- CVE-2022-36391 Misconfiguration in Intel(R) NUC Pro Software Suite
- CVE-2022-36390 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2022-3639 Denial of service in GitLab
- CVE-2022-36389 WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-36388 WordPress YDS Support Ticket System plugin <= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-36387 WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability
- CVE-2022-36386 Code injection in Import any XML or CSV File to WordPress (WordPress plugin)
- CVE-2022-36385 Contec Health CMS8000
- CVE-2022-36384 Privilege escalation in Intel(r) NUC Kit Wireless Adapter drivers for Windows 10
- CVE-2022-36383 Cross-site scripting in Word Search Puzzles game (WordPress plugin)
- CVE-2022-36382 Memory corruption in Intel(R) Ethernet Network Controllers and Adapters E810 Series and some Intel(R) Ethernet 700 Series Controllers and Adapters
- CVE-2022-36381 Command injection in Nintendo Wi-Fi Network Adaptor WAP-001
- CVE-2022-36380 Privilege escalation in Intel(r) NUC Kit Wireless Adapter drivers for Windows 10
- CVE-2022-36379 WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update
- CVE-2022-36378 WordPress Floating Div plugin <= 3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-36377 Privilege escalation in Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs
- CVE-2022-36376 WordPress Rank Math SEO plugin <= 1.0.95 - Server-Side Request Forgery (SSRF) vulnerability
- CVE-2022-36375 WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability
- CVE-2022-36374 Privilege escalation in Intel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2022-36373 WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-36372 Memory corruption in Intel(R) NUC BIOS firmware
- CVE-2022-36370 Auth bypass in Intel(R) NUC Boards and Intel(R) NUC Kits