Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 280 of 437.
- CVE-2022-36258 SQL injection in inventorymanagementsystem project:inventorymanagementsystem
- CVE-2022-36257 SQL injection in inventorymanagementsystem project:inventorymanagementsystem
- CVE-2022-36256 SQL injection in inventorymanagementsystem project:inventorymanagementsystem
- CVE-2022-36255 SQL injection in inventorymanagementsystem project:inventorymanagementsystem
- CVE-2022-36254 Cross-site scripting in hotel management system project:hotel management system
- CVE-2022-36251 Cross-site scripting in oretnom23:clinic\'s patient management system
- CVE-2022-36250 Cross Site Request Forgery on Shop Beat Services
- CVE-2022-3625 Linux Kernel IPsec devlink.c devlink_param_get use after free
- CVE-2022-36249 Shop Beat Services Vulnerable To Bypass 2FA via APIs
- CVE-2022-36247 Shop Beat Services Vulnerable To IDOR
- CVE-2022-36246 Shop Beat Services Vulnerable To Insecure Permissions
- CVE-2022-36244 Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services
- CVE-2022-36243 Directory Traversal on Shop Beat Services
- CVE-2022-36242 SQL injection in oretnom23:clinic\'s patient management system
- CVE-2022-3624 Linux Kernel IPsec bond_alb.c rlb_arp_xmit memory leak
- CVE-2022-36234 Memory corruption in simplenetwork project:simplenetwork
- CVE-2022-36233 Memory corruption in tendacn:ac9 firmware
- CVE-2022-36231 Code injection in pdf_info
- CVE-2022-3623 Linux Kernel BPF gup.c follow_page_pte race condition
- CVE-2022-36228 Missing authorization in janusintl:noke hd\+ smart padlock firmware
- CVE-2022-36227 Null dereference in debian:debian linux
- CVE-2022-36226 Missing authorization in siteservercms project:siteservercms
- CVE-2022-36225 Cross-site request forgery in eyoucms:eyoucms
- CVE-2022-36224 Cross-site request forgery in xunruicms:xunruicms
- CVE-2022-36223 Cross-site scripting in emby:emby
- CVE-2022-36222 Hardcoded credentials in nokia:fastmile firmware
- CVE-2022-36221 Path traversal in nokia:fastmile firmware
- CVE-2022-36220 Security feature bypass in ethz:safe exam browser
- CVE-2022-3622 Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
- CVE-2022-36216 Code injection in dedecms:dedecms
- CVE-2022-36215 Code injection in dedebiz:dedecmsv6
- CVE-2022-3621 Linux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereference
- CVE-2022-36203 Cross-site scripting in doctor\'s appointment system project:doctor\'s appointment system
- CVE-2022-36202 Missing authorization in doctor\'s appointment system project:doctor\'s appointment system
- CVE-2022-36201 SQL injection in doctor\'s appointment system project:doctor\'s appointment system
- CVE-2022-36200 Information disclosure in fiberhome:hg150-ub firmware
- CVE-2022-3620 Exim DMARC dmarc.c dmarc_dns_lookup use after free
- CVE-2022-36198 SQL injection in phpgurukul:bus pass management system
- CVE-2022-36197 File upload in bigtreecms:bigtree cms
- CVE-2022-36194 Cross-site scripting in centreon:centreon
- CVE-2022-36193 SQL injection in lahirudanushka:school management system
- CVE-2022-36191 Memory corruption in gpac:gpac
- CVE-2022-36190 Use after free in gpac:gpac
- CVE-2022-3619 Linux Kernel Bluetooth l2cap_core.c l2cap_recv_acldata memory leak
- CVE-2022-36186 Null dereference in gpac:gpac
- CVE-2022-36182 Hashicorp Boundary vulnerable to clickjacking
- CVE-2022-36180 Cross-site scripting in fusiondirectory:fusiondirectory
- CVE-2022-3618 Spacer < 3.0.7 - Admin+ Stored XSS
- CVE-2022-36179 Other in fusiondirectory:fusiondirectory
- CVE-2022-36174 Security feature bypass in freshworks:freshservice agent
- CVE-2022-36173 Weak cryptography in freshworks:freshservice agent
- CVE-2022-36171 Hardcoded credentials in mapgis:mapgis igserver
- CVE-2022-36170 Hardcoded credentials in mapgis:igserver
- CVE-2022-36168 Path traversal in wuzhicms:wuzhicms
- CVE-2022-36161 SQL injection in garage management system project:garage management system
- CVE-2022-3616 OctoRPKI crash when maximum iterations number is reached
- CVE-2022-36159 Hardcoded credentials in contec:fxa2000 firmware
- CVE-2022-36158 Command injection in contec:fxa2000 firmware
- CVE-2022-36157 Improper Privilege Management in com.xuxueli:xxl-job
- CVE-2022-36155 Denial of service in monostream:tifig
- CVE-2022-36153 Null dereference in monostream:tifig
- CVE-2022-36152 Denial of service in monostream:tifig
- CVE-2022-36151 Null dereference in monostream:tifig
- CVE-2022-36150 Memory corruption in monostream:tifig
- CVE-2022-36149 Use after free in monostream:tifig
- CVE-2022-36148 Denial of service in fdkaac project:fdkaac
- CVE-2022-36146 Denial of service in swfmill:swfmill
- CVE-2022-36145 Denial of service in swfmill:swfmill
- CVE-2022-36144 Memory corruption in swfmill:swfmill
- CVE-2022-36143 Memory corruption in swfmill:swfmill
- CVE-2022-36142 Memory corruption in swfmill:swfmill
- CVE-2022-36141 Memory corruption in swfmill:swfmill
- CVE-2022-36140 Denial of service in swfmill:swfmill
- CVE-2022-3614 Auth bypass in Octopus Server
- CVE-2022-36139 Memory corruption in swfmill:swfmill
- CVE-2022-36137 Cross-site scripting in churchcrm:churchcrm
- CVE-2022-36136 Cross-site scripting in churchcrm:churchcrm
- CVE-2022-36133 Auth bypass in epson:tm-c3500 firmware
- CVE-2022-36131 Cross-site scripting in midori-global:better pdf exporter
- CVE-2022-36130 Privilege escalation in hashicorp:boundary
- CVE-2022-3613 Denial of service in GitLab
- CVE-2022-36129 Missing authorization in hashicorp:vault
- CVE-2022-36127 Service unavailability impact in NodeJS agent(version <= 0.5.0)
- CVE-2022-36126 Code injection in inductiveautomation:ignition
- CVE-2022-36125 Integer overflow when reading corrupted .avro file in Avro Rust SDK
- CVE-2022-36124 Memory overconsumption in Avro Rust SDK
- CVE-2022-36123 Privilege escalation in linux:linux kernel
- CVE-2022-36122 Misconfiguration in automox:automox
- CVE-2022-36121 Missing authorization in ssctech:blue prism enterprise
- CVE-2022-36120 Missing authorization in ssctech:blue prism enterprise
- CVE-2022-36119 Deserialization in ssctech:blue prism
- CVE-2022-36118 Missing authorization in ssctech:blue prism
- CVE-2022-36117 Auth bypass in ssctech:blue prism
- CVE-2022-36116 Missing authorization in ssctech:blue prism
- CVE-2022-36115 Code injection in ssctech:blue prism
- CVE-2022-36114 Extracting malicious crates can fill the file system
- CVE-2022-36113 Extracting malicious crates can corrupt arbitrary files
- CVE-2022-36112 Blind Server-Side Request Forgery (SSRF) in GLPI
- CVE-2022-36111 immundb has insufficient verification of data authenticity
- CVE-2022-36110 Netmaker vulnerable to Insufficient Granularity of Access Control