Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 287 of 437.
- CVE-2022-35426 File upload in ucms project:ucms
- CVE-2022-35422 SQL injection in web based quiz system project:web based quiz system
- CVE-2022-35421 SQL injection in online tours and travels management system project:online tours and travels management system
- CVE-2022-35416 Cross-site scripting in h3c:ssl vpn
- CVE-2022-35415 Privilege escalation in ni:configuration manager
- CVE-2022-35414 Memory corruption in debian:debian linux
- CVE-2022-35413 Hardcoded credentials in pentasecurity:wapples
- CVE-2022-35412 Security feature bypass in digitalguardian:digital guardian
- CVE-2022-35411 rpc.py vulnerable to Deserialization of Untrusted Data
- CVE-2022-35410 mat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process.
- CVE-2022-3541 Linux Kernel BPF spl2sw_driver.c spl2sw_nvmem_get_mac_address use after free
- CVE-2022-35409 Memory corruption in arm:mbed tls
- CVE-2022-35408 Privilege escalation in insyde:insydeh2o
- CVE-2022-35407 Memory corruption in insyde:kernel
- CVE-2022-35406 Open redirect in portswigger:burp suite
- CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution
- CVE-2022-35404 Other in zohocorp:manageengine firewall analyzer
- CVE-2022-35403 Information disclosure in zohocorp:manageengine assetexplorer
- CVE-2022-35401 Auth bypass in RT-AX82U
- CVE-2022-3540 Information disclosure in hunter2
- CVE-2022-3539 Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting
- CVE-2022-3538 Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation
- CVE-2022-3537 Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload
- CVE-2022-3536 Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization
- CVE-2022-3534 Linux Kernel libbpf btf_dump.c btf_dump_name_dups use after free
- CVE-2022-3533 Linux Kernel BPF usdt.c parse_usdt_arg memory leak
- CVE-2022-35299 Memory corruption in SAP IQ
- CVE-2022-35298 Cross-site scripting in SAP NetWeaver Enterprise Portal (KMC)
- CVE-2022-35297 Cross-site scripting in SAP Enable Now
- CVE-2022-35296 Information disclosure in SAP BusinessObjects Business Intelligence Platform (Version Management System)
- CVE-2022-35295 Privilege escalation in SAP Host Agent (SAPOSCOL)
- CVE-2022-35294 Cross-site scripting in SAP NetWeaver AS ABAP
- CVE-2022-35293 Auth bypass in SAP Enable Now Manager
- CVE-2022-35292 Privilege escalation in SAP Business One
- CVE-2022-35291 Privilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application(Android & iOS)
- CVE-2022-35290 Information disclosure in SAP Authenticator for Android
- CVE-2022-35289 Integer overflow in Hermes
- CVE-2022-35288 Information disclosure in Security Verify Information Queue
- CVE-2022-35287 Hardcoded credentials in Security Verify Information Queue
- CVE-2022-35286 Cross-site request forgery in Security Verify Information Queue
- CVE-2022-35285 Cross-site request forgery in Security Verify Information Queue
- CVE-2022-35284 Information disclosure in Security Verify Information Queue
- CVE-2022-35283 Denial of service in Security Verify Information Queue
- CVE-2022-35282 Server-side request forgery in WebSphere Application Server
- CVE-2022-35281 IBM Maximo Application Suite command injection
- CVE-2022-35280 Misconfiguration in Robotic Process Automation
- CVE-2022-35279 Information disclosure in IBM Business Automation Workflow
- CVE-2022-35278 HTML Injection in ActiveMQ Artemis Web Console
- CVE-2022-35277 WordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-35276 Privilege escalation in Intel(R) NUC 8 Compute Elements
- CVE-2022-35275 Cross-site scripting in Advanced Order Export For WooCommerce (WordPress plugin)
- CVE-2022-35273 Command injection in CentreCOM AR260S V2
- CVE-2022-35272 BIG-IP HTTP MRF vulnerability CVE-2022-35272
- CVE-2022-35271 Denial of service in R1510
- CVE-2022-35270 Denial of service in R1510
- CVE-2022-35269 Denial of service in R1510
- CVE-2022-35268 Denial of service in R1510
- CVE-2022-35267 Denial of service in R1510
- CVE-2022-35266 Denial of service in R1510
- CVE-2022-35265 Denial of service in R1510
- CVE-2022-35264 Denial of service in R1510
- CVE-2022-35263 Denial of service in R1510
- CVE-2022-35262 Denial of service in R1510
- CVE-2022-35261 Denial of service in R1510
- CVE-2022-35260 Memory corruption in https://github.com/curl/curl
- CVE-2022-3526 Linux Kernel skb macvlan.c macvlan_handle_frame memory leak
- CVE-2022-35259 Code injection in Ivanti Endpoint Manager
- CVE-2022-35258 Denial of service in Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Neurons for Zero Trust Access Gateway
- CVE-2022-35257 Privilege escalation in UI Desktop for Windows
- CVE-2022-35256 Other in Node
- CVE-2022-35255 Weak cryptography in Node
- CVE-2022-35254 Denial of service in Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Neurons for Zero Trust Access Gateway
- CVE-2022-35252 Denial of service in https://github.com/curl/curl
- CVE-2022-35251 Cross-site scripting in Rocket.chat
- CVE-2022-35250 Missing authorization in Rocket.chat
- CVE-2022-3525 Deserialization of Untrusted Data in librenms/librenms
- CVE-2022-35249 Missing authorization in Rocket.Chat
- CVE-2022-35248 Auth bypass in Rocket.Chat
- CVE-2022-35247 Missing authorization in Rocket.Chat
- CVE-2022-35246 Information disclosure in Rocket.Chat
- CVE-2022-35245 BIG-IP APM access policy vulnerability CVE-2022-35245
- CVE-2022-35244 Memory corruption in iota All-In-One Security Kit
- CVE-2022-35243 Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243
- CVE-2022-35242 Missing authorization in THE Leads Management System: 59sec LITE (WordPress plugin)
- CVE-2022-35241 NGINX Instance Manager vulnerability CVE-2022-35241
- CVE-2022-35240 BIG-IP Message Routing MQTT vulnerability CVE-2022-35240
- CVE-2022-3524 Linux Kernel IPv6 ipv6_renew_options memory leak
- CVE-2022-35239 File upload in SolarView Compact
- CVE-2022-35238 WordPress Awesome Filterable Portfolio plugin <= 1.9.7 - Unauthenticated Plugin Settings Change vulnerability
- CVE-2022-35236 HTTP2 profile vulnerability CVE-2022-35236
- CVE-2022-35235 WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Read vulnerability
- CVE-2022-35234 Memory corruption in Trend Micro Security(Consumer)
- CVE-2022-35230 Reflected XSS in graphs page of Zabbix Frontend
- CVE-2022-3523 Linux Kernel Driver memory.c use after free
- CVE-2022-35229 Reflected XSS in discovery page of Zabbix Frontend
- CVE-2022-35228 Cross-site request forgery in SAP BusinessObjects Business Intelligence Platform (Central management Console)
- CVE-2022-35227 Cross-site scripting in SAP NetWeaver Enterprise Portal (WPC)
- CVE-2022-35226 Cross-site scripting in SAP Data Services Management Console
- CVE-2022-35225 Cross-site scripting in SAP NetWeaver Enterprise Portal
- CVE-2022-35224 Cross-site scripting in SAP Enterprise Portal