Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 283 of 437.
- CVE-2022-35923 Inefficient Regular Expression Complexity in v8n
- CVE-2022-35922 Memory allocation based on untrusted length in rust-websocket
- CVE-2022-35921 User preference to prevent private discussions not respected in fof/byobu
- CVE-2022-35920 Improper Limitation of a Pathname to a Restricted Directory in sanic
- CVE-2022-3592 Path traversal in samba
- CVE-2022-35919 Authenticated requests for server update admin API allows path traversal in minio
- CVE-2022-35918 Streamlit directory traversal vulnerability
- CVE-2022-35917 Weakness in Transfer Validation Logic in @solana/pay
- CVE-2022-35916 Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls
- CVE-2022-35915 Unbounded gas consumption in @openzeppelin/contracts
- CVE-2022-35914 Teclib GLPI Remote Code Execution
- CVE-2022-35913 Denial of service in kayako:samourai
- CVE-2022-35912 Grails framework Remote Code Execution via Data Binding
- CVE-2022-35911 Denial of service in patlite:nhl-fb2 firmware
- CVE-2022-35910 Cross-site scripting in jellyfin:jellyfin
- CVE-2022-3591 Use After Free in vim/vim
- CVE-2022-35909 Incorrect Access Control and Cross Site Scripting in Jellyfin
- CVE-2022-35908 Command injection in cambiumnetworks:enterprise wi-fi
- CVE-2022-35906 Memory corruption in bentley:microstation
- CVE-2022-35905 Memory corruption in bentley:microstation
- CVE-2022-35904 Memory corruption in bentley:microstation
- CVE-2022-35903 Memory corruption in bentley:microstation
- CVE-2022-35902 Memory corruption in bentley:microstation
- CVE-2022-35901 Memory corruption in bentley:microstation
- CVE-2022-35900 Memory corruption in bentley:microstation
- CVE-2022-3590 WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding
- CVE-2022-35899 Privilege escalation in asus:aura ready game software development kit
- CVE-2022-35898 Auth bypass in opentext:bizmanager
- CVE-2022-35897 Memory corruption in insyde:kernel
- CVE-2022-35896 Information disclosure in insyde:insydeh2o
- CVE-2022-35895 Memory corruption in insyde:insydeh2o
- CVE-2022-35894 Information disclosure in insyde:insydeh2o
- CVE-2022-35893 Memory corruption in insyde:insydeh2o
- CVE-2022-35890 Auth bypass in inductiveautomation:ignition
- CVE-2022-3589 Miele: Vulnerability in cloud service used by appWash
- CVE-2022-35888 Information disclosure in amperecomputing:ampere altra firmware
- CVE-2022-35887 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35886 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35885 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35884 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35883 Null dereference in Intel(R) Media SDK software
- CVE-2022-35882 WordPress GS Testimonial Slider plugin <= 1.9.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-35881 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35880 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35879 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35878 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35877 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35876 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35875 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35874 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35873 Code injection in Ignition
- CVE-2022-35872 Deserialization in Ignition
- CVE-2022-35871 Auth bypass in Ignition
- CVE-2022-35870 Deserialization in Ignition
- CVE-2022-3587 SourceCodester Simple Cold Storage Management System My Account cross site scripting
- CVE-2022-35869 Auth bypass in Ignition
- CVE-2022-35868 Privilege escalation in TIA Multiuser Server V14
- CVE-2022-35867 Memory corruption in xhyve
- CVE-2022-35866 Hardcoded credentials in Backup and Recovery
- CVE-2022-35865 Missing authorization in Track-It!
- CVE-2022-35864 SQL injection in Track-It!
- CVE-2022-35861 Path traversal in pyenv:pyenv
- CVE-2022-35860 Weak cryptography in corsair:k63 firmware
- CVE-2022-3586 Use after free in Linux Kernel
- CVE-2022-35858 Memory corruption in samsung:mtower
- CVE-2022-35857 Deserialization in kvf-admin project:kvf-admin
- CVE-2022-35851 Cross-site scripting in Fortinet FortiADC
- CVE-2022-35850 Cross-site scripting in FortiAuthenticator
- CVE-2022-3585 SourceCodester Simple Cold Storage Management System Contact Us cross-site request forgery
- CVE-2022-35849 Command injection in FortiADC
- CVE-2022-35847 Code injection in Fortinet FortiSOAR
- CVE-2022-35846 Auth bypass in Fortinet FortiTester
- CVE-2022-35845 Command injection in FortiTester
- CVE-2022-35844 Command injection in Fortinet FortiTester
- CVE-2022-35843 Auth bypass in FortiOS
- CVE-2022-35842 Information disclosure in Fortinet FortiOS
- CVE-2022-35841 Windows Enterprise App Management Service Remote Code Execution Vulnerability
- CVE-2022-35840 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2022-3584 SourceCodester Canteen Management System edituser.php sql injection
- CVE-2022-35838 HTTP V3 Denial of Service Vulnerability
- CVE-2022-35837 Windows Graphics Component Information Disclosure Vulnerability
- CVE-2022-35836 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2022-35835 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2022-35834 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2022-35833 Windows Secure Channel Denial of Service Vulnerability
- CVE-2022-35832 Windows Event Tracing Denial of Service Vulnerability
- CVE-2022-35831 Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2022-35830 Remote Procedure Call Runtime Remote Code Execution Vulnerability
- CVE-2022-3583 SourceCodester Canteen Management System login.php sql injection
- CVE-2022-35829 Service Fabric Explorer Spoofing Vulnerability
- CVE-2022-35828 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
- CVE-2022-35827 Visual Studio Remote Code Execution Vulnerability
- CVE-2022-35826 Visual Studio Remote Code Execution Vulnerability
- CVE-2022-35825 Visual Studio Remote Code Execution Vulnerability
- CVE-2022-35824 Azure Site Recovery Remote Code Execution Vulnerability
- CVE-2022-35823 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2022-35822 Windows Defender Credential Guard Security Feature Bypass Vulnerability
- CVE-2022-35821 Azure Sphere Information Disclosure Vulnerability
- CVE-2022-35820 Windows Bluetooth Driver Elevation of Privilege Vulnerability
- CVE-2022-3582 SourceCodester Simple Cold Storage Management System cross-site request forgery