Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 290 of 437.
- CVE-2022-34964 Cross-site scripting in openteknik:open source social network
- CVE-2022-34963 Cross-site scripting in openteknik:open source social network
- CVE-2022-34962 Cross-site scripting in openteknik:open source social network
- CVE-2022-34961 Cross-site scripting in openteknik:open source social network
- CVE-2022-34960 Path traversal in mikrotik:routeros
- CVE-2022-3496 SourceCodester Human Resource Management System Admin Panel employeeadd.php access control
- CVE-2022-34956 SQL injection in pligg:pligg cms
- CVE-2022-34955 SQL injection in pligg:pligg cms
- CVE-2022-34954 SQL injection in phptpoint:pharmacy management system
- CVE-2022-34953 SQL injection in phptpoint:pharmacy management system
- CVE-2022-34952 SQL injection in phptpoint:pharmacy management system
- CVE-2022-34951 SQL injection in phptpoint:pharmacy management system
- CVE-2022-34950 SQL injection in pharmacy management system project:pharmacy management system
- CVE-2022-3495 SourceCodester Simple Online Public Access Catalog Admin Login sql injection
- CVE-2022-34949 SQL injection in pharmacy management system project:pharmacy management system
- CVE-2022-34948 SQL injection in pharmacy management system project:pharmacy management system
- CVE-2022-34947 SQL injection in pharmacy management system project:pharmacy management system
- CVE-2022-34946 SQL injection in pharmacy management system project:pharmacy management system
- CVE-2022-34945 SQL injection in pharmacy management system project:pharmacy management system
- CVE-2022-3494 Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi
- CVE-2022-34937 Cross-site request forgery in yuba:u5cms
- CVE-2022-3493 SourceCodester Human Resource Management System Add Employee cross site scripting
- CVE-2022-34928 SQL injection in jflyfox:jfinal cms
- CVE-2022-34927 Memory corruption in milkytracker project:milkytracker
- CVE-2022-34924 Path traversal in landray:landray office automation
- CVE-2022-3492 SourceCodester Human Resource Management System Profile Photo os command injection
- CVE-2022-34919 File upload in zengenti:contensis
- CVE-2022-34918 Memory corruption in canonical:ubuntu linux
- CVE-2022-34917 Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers
- CVE-2022-34916 Improper Input Validation (JNDI Injection) in JMSMessageConsumer
- CVE-2022-34914 Command injection in webswing:webswing
- CVE-2022-34913 Memory corruption in md2roff project:md2roff
- CVE-2022-34912 Cross-site scripting in fedoraproject:fedora
- CVE-2022-34911 Cross-site scripting in fedoraproject:fedora
- CVE-2022-34910 Information disclosure in aremis:aremis 4 nomads
- CVE-2022-3491 Heap-based Buffer Overflow in vim/vim
- CVE-2022-34909 SQL injection in aremis:aremis 4 nomads
- CVE-2022-34908 Auth bypass in aremis:aremis 4 nomads
- CVE-2022-34907 Hardcoded credentials in filewave:filewave
- CVE-2022-34906 Hardcoded credentials in filewave:filewave
- CVE-2022-34903 Security feature bypass in debian:debian linux
- CVE-2022-34902 Privilege escalation in Access
- CVE-2022-34901 Privilege escalation in Access
- CVE-2022-34900 Privilege escalation in Access
- CVE-2022-3490 Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection
- CVE-2022-34899 Race condition in Access
- CVE-2022-34894 Missing authorization in Hub
- CVE-2022-34893 Privilege escalation in Trend Micro Security (Consumer)
- CVE-2022-34892 Race condition in Desktop
- CVE-2022-34891 Privilege escalation in Desktop
- CVE-2022-34890 Memory corruption in Desktop
- CVE-2022-3489 WP Hide <= 0.0.2 - Unauthenticated Settings Update
- CVE-2022-34889 Memory corruption in Desktop
- CVE-2022-34888 Server-side request forgery in Lenovo XClarity Controller
- CVE-2022-34887 Auth bypass in Printer G263DNS
- CVE-2022-34886 Memory corruption in Printer G263DNS
- CVE-2022-34885 Code injection in MR2600 Router
- CVE-2022-34884 Memory corruption in Lenovo XClarity Controller
- CVE-2022-34883 OS Command Injection Vulnerability in RAID Manager Storage Replication Adapter
- CVE-2022-34882 Information Exposure Vulnerability in RAID Manager Storage Replication Adapter
- CVE-2022-34881 Information Exposure Vulnerability in JP1/Automatic Operation
- CVE-2022-3488 named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries
- CVE-2022-34879 Cross-site scripting in VICIdial
- CVE-2022-34878 VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.
- CVE-2022-34877 SQL injection in VICIdial
- CVE-2022-34876 VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.
- CVE-2022-34875 Memory corruption in PDF Reader
- CVE-2022-34874 Memory corruption in PDF Reader
- CVE-2022-34873 Memory corruption in PDF Reader
- CVE-2022-34872 SQL injection in Centreon
- CVE-2022-34871 SQL injection in Centreon
- CVE-2022-34870 Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application
- CVE-2022-34869 Command injection in CentreCOM AR260S V2
- CVE-2022-34868 WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability
- CVE-2022-34867 WordPress WP Libre Form 2 plugin <= 2.0.8 - Unauthenticated Sensitive Information Disclosure vulnerability
- CVE-2022-34866 Command injection in Passage Drive
- CVE-2022-34865 Traffic intelligence feeds vulnerability CVE-2022-34865
- CVE-2022-34864 Memory corruption in Intel(R) Trace Analyzer and Collector software
- CVE-2022-34862 TMM vulnerability CVE-2022-34862
- CVE-2022-3486 Open redirect in GitLab
- CVE-2022-34858 WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability
- CVE-2022-34857 WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2022-34855 Path traversal in Intel(R) NUC Pro Software Suite
- CVE-2022-34854 Privilege escalation in Intel(R) SUR software
- CVE-2022-34853 WordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-34851 BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851
- CVE-2022-34850 Command injection in R1510
- CVE-2022-3485 Weak Password Recovery in ifm moneo appliance
- CVE-2022-34849 Denial of service in Intel(R) Iris(R) Xe MAX drivers for Windows
- CVE-2022-34848 Privilege escalation in Intel(R) NUC Pro Software Suite
- CVE-2022-34845 Security feature bypass in R1510
- CVE-2022-34844 BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844
- CVE-2022-34843 Integer overflow in Intel(R) Trace Analyzer and Collector software
- CVE-2022-34841 Memory corruption in Intel(R) Media SDK software
- CVE-2022-34840 Hardcoded credentials in Buffalo network devices
- CVE-2022-3484 WPB Show Core - Reflected Cross-Site Scripting
- CVE-2022-34839 WordPress WP OAuth2 Server plugin <= 1.0.1 - Authentication Bypass vulnerability
- CVE-2022-34838 ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
- CVE-2022-34837 ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
- CVE-2022-34836 ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control