Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 279 of 437.
- CVE-2022-3637 Linux Kernel BlueZ jlink.c jlink_init denial of service
- CVE-2022-36369 Privilege escalation in QATzip software maintained by Intel(R)
- CVE-2022-36368 Cross-site scripting in IPFire
- CVE-2022-36367 Misconfiguration in Intel(R) Support Android application
- CVE-2022-36365 WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-36364 Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vector
- CVE-2022-36363 Information disclosure in LOGO! 12/24RCE
- CVE-2022-36362 Other in LOGO! 12/24RCE
- CVE-2022-36361 Memory corruption in LOGO! 12/24RCE
- CVE-2022-36360 Security feature bypass in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2022-3636 Linux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use after free
- CVE-2022-36359 Django vulnerable to Reflected File Download attack
- CVE-2022-36358 WordPress SEO Scout plugin <= 0.9.83 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-36357 WordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2022-36356 WordPress Culture Object plugin <= 4.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-36355 WordPress Easy Org Chart plugin <= 3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-36354 Memory corruption in OpenImageIO
- CVE-2022-36352 WordPress ProfileGrid Plugin <= 5.0.3 is vulnerable to Broken Access Control
- CVE-2022-36351 Denial of service in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-36350 Cross-site scripting in PukiWiki
- CVE-2022-3635 Linux Kernel IPsec idt77252.c tst_timer use after free
- CVE-2022-36349 Misconfiguration in Intel(R) NUC Boards and Intel(R) NUC Kits
- CVE-2022-36348 Privilege escalation in Intel (R) SPS firmware
- CVE-2022-36347 Cross-site scripting in Alpine PhotoTile for Pinterest (WordPress plugin)
- CVE-2022-36346 WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-36345 WordPress Download Plugin Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-36344 Privilege escalation in JustSystems JUST Online Update for J-License'
- CVE-2022-36343 WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-36341 Cross-site scripting in AS – Create Pinterest Pinboard Pages (WordPress plugin)
- CVE-2022-36340 WordPress MailOptin plugin <= 1.2.49.0 - Unauthenticated Optin Campaign Cache Deletion vulnerability
- CVE-2022-3634 Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection
- CVE-2022-36339 Privilege escalation in Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element
- CVE-2022-36338 Privilege escalation in insyde:insydeh2o
- CVE-2022-36337 Memory corruption in insyde:kernel
- CVE-2022-36336 Privilege escalation in Trend Micro Apex One
- CVE-2022-36331 Impersonation attack causing an Authentication Bypass on Western Digital devices
- CVE-2022-36330 Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices
- CVE-2022-3633 Linux Kernel transport.c j1939_session_destroy memory leak
- CVE-2022-36329 Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices
- CVE-2022-36328 Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices
- CVE-2022-36327 Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
- CVE-2022-36326 Resource Exhaustion Vulnerability in Western Digital devices
- CVE-2022-36325 Cross-site scripting in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2022-36324 Denial of service in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2022-36323 Code injection in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2022-36322 Code injection in TeamCity
- CVE-2022-36321 Information disclosure in TeamCity
- CVE-2022-36320 Memory corruption in Firefox
- CVE-2022-3632 OAuth Client by DigitialPixies <= 1.1.0 - CSRF
- CVE-2022-36319 Other in Firefox
- CVE-2022-36318 Cross-site scripting in Firefox
- CVE-2022-36317 Denial of service in Firefox
- CVE-2022-36316 Information disclosure in Firefox
- CVE-2022-36315 Security feature bypass in Firefox
- CVE-2022-36314 Server-side request forgery in Firefox
- CVE-2022-36313 file-type vulnerable to Infinite Loop via malformed MKV file
- CVE-2022-36312 Cross-site request forgery in AirVelocity
- CVE-2022-36311 Cross-site scripting in AirVelocity
- CVE-2022-36310 Misconfiguration in AirVelocity
- CVE-2022-3631 OAuth Client by DigitialPixies <= 1.1.0 - Admin+ Stored Cross-Site Scripting
- CVE-2022-36309 Command injection in AirVelocity
- CVE-2022-36308 Information disclosure in AirVelocity
- CVE-2022-36307 Information disclosure in AirVelocity
- CVE-2022-36306 Information disclosure in AirVelocity
- CVE-2022-36305 Cross-site scripting in vestacp:vesta control panel
- CVE-2022-36304 Cross-site scripting in vestacp:vesta control panel
- CVE-2022-36303 Cross-site scripting in vestacp:vesta control panel
- CVE-2022-36302 Path traversal in BF-OS
- CVE-2022-36301 Weak cryptography in BF-OS
- CVE-2022-3630 Linux Kernel IPsec cookie.c memory leak
- CVE-2022-36296 WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability
- CVE-2022-36293 Memory corruption in Nintendo Wi-Fi Network Adaptor WAP-001
- CVE-2022-36292 WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-3629 Linux Kernel af_vsock.c vsock_connect memory leak
- CVE-2022-36289 Denial of service in Intel(R) Media SDK software
- CVE-2022-36288 WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-36287 Denial of service in FCS Server software maintained by Intel
- CVE-2022-36285 WordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability
- CVE-2022-36284 Missing authorization in Affiliate For WooCommerce (WordPress plugin)
- CVE-2022-36282 WordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-36280 There is an out-of-bounds write vulnerability in vmwgfx driver
- CVE-2022-3628 Memory corruption in Kernel
- CVE-2022-36279 Memory corruption in QUARTZ-GOLD
- CVE-2022-36278 Privilege escalation in Intel(R) Battery Life Diagnostic Tool software
- CVE-2022-36277 SQL injection vulnerability in TCMAN GIM
- CVE-2022-36276 SQL injection vulnerability in TCMAN GIM
- CVE-2022-36273 Command injection in tenda:ac9 firmware
- CVE-2022-36272 Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter
- CVE-2022-36271 Privilege escalation in outbyte:pc repair
- CVE-2022-36270 Code injection in oretnom23:clinic\'s patient management system
- CVE-2022-3627 Memory corruption in libtiff
- CVE-2022-36267 Command injection in airspan:airspot 5410 firmware
- CVE-2022-36266 Cross-site scripting in airspan:airspot 5410 firmware
- CVE-2022-36265 Command injection in airspan:airspot 5410 firmware
- CVE-2022-36264 File upload in airspan:airspot 5410 firmware
- CVE-2022-36263 Privilege escalation in logitech:streamlabs desktop
- CVE-2022-36262 Code injection in taogogo:taocms
- CVE-2022-36261 Path traversal in taogogo:taocms
- CVE-2022-3626 Memory corruption in libtiff
- CVE-2022-36259 SQL injection in inventorymanagementsystem project:inventorymanagementsystem