Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 288 of 437.
- CVE-2022-35223 EasyUse MailHunter Ultimate - Deserialization of Untrusted Data
- CVE-2022-35222 HiCOS Citizen verification component - Stack Buffer Overflow
- CVE-2022-35221 TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-2
- CVE-2022-35220 TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-1
- CVE-2022-35219 NHI card’s web service component - Stack-based Buffer Overflow-2
- CVE-2022-35218 NHI card’s web service component - Heap-based Buffer Overflow
- CVE-2022-35217 NHI card’s web service component - Stack-based Buffer Overflow-1
- CVE-2022-35216 ITPison OMICARD EDM - Use of Hard-coded Credentials
- CVE-2022-35213 Cross-site scripting in ecommerce-codeigniter-bootstrap project:ecommerce-codeigniter-bootstrap
- CVE-2022-35212 Cross-site scripting in oscommerce:oscommerce
- CVE-2022-3521 Linux Kernel kcm kcmsock.c kcm_tx_work race condition
- CVE-2022-35206 Null dereference in gnu:binutils
- CVE-2022-35205 Denial of service in gnu:binutils
- CVE-2022-35204 Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
- CVE-2022-35203 Auth bypass in trendnet:tv-ip572pi firmware
- CVE-2022-35202 A security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non-default) scenarios, to gain access to the
- CVE-2022-35201 Command injection in tenda:ac18 firmware
- CVE-2022-3520 Heap-based Buffer Overflow in vim/vim
- CVE-2022-35198 Hardcoded credentials in contract management system project:contract managment system
- CVE-2022-35196 Cross-site request forgery in testlink:testlink
- CVE-2022-35195 Missing authorization in testlink:testlink
- CVE-2022-35194 Cross-site scripting in testlink:testlink
- CVE-2022-35193 SQL injection in testlink:testlink
- CVE-2022-35192 Memory corruption in dlink:dsl-3782 firmware
- CVE-2022-35191 Denial of service in dlink:dsl-3782 firmware
- CVE-2022-3519 SourceCodester Sanitization Management System Quote Requests Tab cross site scripting
- CVE-2022-3518 SourceCodester Sanitization Management System User Creation cross site scripting
- CVE-2022-35175 SQL injection in barangay management system project:barangay management system
- CVE-2022-35174 Cross site scripting in getkirby/starterkit
- CVE-2022-35173 Memory corruption in nginx:njs
- CVE-2022-35172 Cross-site scripting in SAP NetWeaver Enterprise Portal
- CVE-2022-35171 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-35170 Cross-site scripting in SAP NetWeaver Enterprise Portal
- CVE-2022-3517 minimatch ReDoS vulnerability
- CVE-2022-35169 Information disclosure in SAP BusinessObjects Business Intelligence Platform (LCM)
- CVE-2022-35168 XML external entity in SAP Business one
- CVE-2022-35167 Misconfiguration in prinitix:cloud print management
- CVE-2022-35166 Denial of service in jpeg:libjpeg
- CVE-2022-35165 Denial of service in axiosys:bento4
- CVE-2022-35164 Use after free in gnu:libredwg
- CVE-2022-35163 Cross-site scripting in complete online job search system project:complete online job search system
- CVE-2022-35162 Cross-site scripting in complete online job search system project:complete online job search system
- CVE-2022-35161 Memory corruption in generalized electric vehicle reverse engineering tool project:generalized electric vehicle reverse engineering tool
- CVE-2022-3516 Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-35158 Denial of service in tencent:tscancode
- CVE-2022-35156 SQL injection in phpgurukul:bus pass management system
- CVE-2022-35155 Cross-site scripting in phpgurukul:bus pass management system
- CVE-2022-35154 SQL injection in shopro:mall system
- CVE-2022-35153 Command injection in fusionpbx:fusionpbx
- CVE-2022-35151 Cross-site scripting in keking:kkfileview
- CVE-2022-35150 File upload in baijiacms project:baijiacms
- CVE-2022-3515 Integer overflow in libksba
- CVE-2022-35148 SQL injection in maccms:maccms
- CVE-2022-35147 Auth bypass in html-js:doracms
- CVE-2022-35144 Raneto vulnerable to Cross-site Scripting
- CVE-2022-35143 Raneto v0.17.0 employs weak password complexity requirements
- CVE-2022-35142 Raneto Denial of Service via crafted payload injected into `Search` parameter
- CVE-2022-3514 Denial of service in GitLab
- CVE-2022-35137 Cross-site scripting in dgiotcloud:dgiot
- CVE-2022-35136 Missing authorization in boodskap:iot platform
- CVE-2022-35135 Auth bypass in boodskap:iot platform
- CVE-2022-35134 Cross-site scripting in boodskap:iot platform
- CVE-2022-35133 Cross-site scripting in cherrytree project:cherrytree
- CVE-2022-35132 Command injection in webmin:usermin
- CVE-2022-35131 Joplin is vulnerable to arbitrary code execution
- CVE-2022-3513 Cross-site scripting in GitLab
- CVE-2022-35122 Missing authorization in ecowitt:gw1100 firmware
- CVE-2022-35121 SQL injection in xxyopen:novel-plus
- CVE-2022-35120 Missing authorization in ixpdata:easyinstall
- CVE-2022-3512 Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command
- CVE-2022-35118 Cross-site scripting in pyrocms:pyrocms
- CVE-2022-35117 Cross-site scripting in oretnom23:clinic\'s patient management system
- CVE-2022-35115 SQL injection in icewarp:webclient dc2
- CVE-2022-35114 Memory corruption in swftools:swftools
- CVE-2022-35113 Memory corruption in swftools:swftools
- CVE-2022-35111 Memory corruption in swftools:swftools
- CVE-2022-35110 Denial of service in swftools:swftools
- CVE-2022-3511 Awesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download
- CVE-2022-35109 Memory corruption in swftools:swftools
- CVE-2022-35108 Null dereference in swftools:swftools
- CVE-2022-35107 Memory corruption in swftools:swftools
- CVE-2022-35106 Memory corruption in swftools:swftools
- CVE-2022-35105 Memory corruption in swftools:swftools
- CVE-2022-35104 Memory corruption in swftools:swftools
- CVE-2022-35101 Memory corruption in swftools:swftools
- CVE-2022-35100 Memory corruption in swftools:swftools
- CVE-2022-3510 Parsing issue in protobuf message-type extension
- CVE-2022-35099 Memory corruption in swftools:swftools
- CVE-2022-35098 Memory corruption in swftools:swftools
- CVE-2022-35097 Memory corruption in swftools:swftools
- CVE-2022-35096 Memory corruption in swftools:swftools
- CVE-2022-35095 Memory corruption in swftools:swftools
- CVE-2022-35094 Memory corruption in swftools:swftools
- CVE-2022-35093 Memory corruption in swftools:swftools
- CVE-2022-35092 Memory corruption in swftools:swftools
- CVE-2022-35091 Denial of service in swftools:swftools
- CVE-2022-35090 Memory corruption in swftools:swftools
- CVE-2022-3509 Parsing issue in protobuf textformat
- CVE-2022-35089 Memory corruption in swftools:swftools
- CVE-2022-35088 Memory corruption in swftools:swftools