Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 291 of 437.
- CVE-2022-34835 Memory corruption in denx:u-boot
- CVE-2022-34834 Cross-site scripting in vermeg:agile reporter
- CVE-2022-34833 Cross-site scripting in vermeg:agile reporter
- CVE-2022-34832 XML external entity in vermeg:agile reporter
- CVE-2022-34831 Security feature bypass in primekey:ejbca
- CVE-2022-34830 Race condition in arm:utgard gpu kernel driver
- CVE-2022-3483 Information disclosure in GitLab
- CVE-2022-34829 Denial of service in zohocorp:manageengine adselfservice plus
- CVE-2022-34827 Missing authorization in carel:boss mini firmware
- CVE-2022-34826 Information disclosure in couchbase:couchbase server
- CVE-2022-34825 Other in CLUSTERPRO X
- CVE-2022-34824 Misconfiguration in CLUSTERPRO X
- CVE-2022-34823 Memory corruption in CLUSTERPRO X
- CVE-2022-34822 Path traversal in CLUSTERPRO X
- CVE-2022-34821 Code injection in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2022-34820 Command injection in SIMATIC CP 1242-7 V2
- CVE-2022-3482 Missing authorization in GitLab
- CVE-2022-34819 Memory corruption in SIMATIC CP 1242-7 V2
- CVE-2022-34818 Jenkins Failed Job Deactivator Plugin Missing Authorization vulnerability
- CVE-2022-34817 Cross-Site Request Forgery in Jenkins Failed Job Deactivator Plugin
- CVE-2022-34816 Passwords stored in plain text by Jenkins hpe-network-virtualization plugin
- CVE-2022-34815 Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin
- CVE-2022-34814 Incorrect Authorization in Jenkins Request Rename Or Delete Plugin
- CVE-2022-34813 Jenkins XPath Configuration Viewer Plugin Missing Authorization vulnerability
- CVE-2022-34812 Cross-Site Request Forgery in Jenkins XPath Configuration Viewer Plugin
- CVE-2022-34811 Missing Authorization in Jenkins XPath Configuration Viewer Plugin
- CVE-2022-34810 Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check
- CVE-2022-3481 WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
- CVE-2022-34809 Password stored in plain text by Jenkins RQM Plugin
- CVE-2022-34808 Token stored in plain text by Jenkins Cisco Spark Plugin
- CVE-2022-34807 Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin
- CVE-2022-34806 Plaintext Storage of a Password in Jenkins Jigomerge Plugin
- CVE-2022-34805 Plaintext Storage of a Password in Jenkins Skype notifier Plugin
- CVE-2022-34804 Jenkins OpsGenie Plugin vulnerable to Cleartext Transmission of Sensitive Information
- CVE-2022-34803 Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability
- CVE-2022-34802 Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin
- CVE-2022-34801 Cleartext Storage of Sensitive Information in Jenkins Build Notifications Plugin
- CVE-2022-34800 Plaintext Storage of a Password in Jenkins Build Notifications Plugin
- CVE-2022-3480 Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family
- CVE-2022-34799 Plaintext Storage of a Password in Jenkins Deployment Dashboard Plugin
- CVE-2022-34798 Missing Authorization in Jenkins Deployment Dashboard Plugin
- CVE-2022-34797 Cross-Site Request Forgery in Jenkins Deployment Dashboard Plugin
- CVE-2022-34796 Jenkins Deployment Dashboard Plugin has Insufficiently Protected Credentials
- CVE-2022-34795 Cross-site Scripting in Jenkins Deployment Dashboard Plugin
- CVE-2022-34794 Missing Authorization in Jenkins Recipe Plugin
- CVE-2022-34793 XML External Entity Reference in Jenkins Recipe Plugin
- CVE-2022-34792 Cross-Site Request Forgery in Jenkins Recipe Plugin
- CVE-2022-34791 Cross-site Scripting in Jenkins Validating Email Parameter Plugin
- CVE-2022-34790 Cross-site Scripting in Jenkins eXtreme Feedback Panel Plugin
- CVE-2022-3479 Denial of service in nss
- CVE-2022-34789 Jenkins Matrix Reloaded Plugin vulnerable to CSRF
- CVE-2022-34788 Jenkins Matrix Reloaded Plugin vulnerable to Stored XSS
- CVE-2022-34787 Jenkins Project Inheritance Plugin vulnerable to cross site scripting
- CVE-2022-34786 Cross-site Scripting in Jenkins Rich Text Publisher Plugin
- CVE-2022-34785 Jenkins build-metrics Plugin Missing Authorization vulnerability
- CVE-2022-34784 Cross site scripting in Jenkins build-metrics Plugin
- CVE-2022-34783 Cross-site Scripting in Jenkins Plot Plugin
- CVE-2022-34782 Incorrect Authorization in Jenkins requests-plugin
- CVE-2022-34781 Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
- CVE-2022-34780 CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
- CVE-2022-3478 Denial of service in GitLab
- CVE-2022-34779 Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow enumerating credentials IDs
- CVE-2022-34778 Cross-site Scripting in Jenkins TestNG Results Plugin
- CVE-2022-34777 Cross-site Scripting in Jenkins GitLab Plugin
- CVE-2022-34776 Tabit - giftcard stealth
- CVE-2022-34775 Tabit - Excessive data exposure
- CVE-2022-34774 Tabit - Arbitrary account modification
- CVE-2022-34773 Tabit - HTTP Method manipulation
- CVE-2022-34772 Tabit - password enumeration
- CVE-2022-34771 Tabit - arbitrary SMS send on Tabits behalf
- CVE-2022-34770 Tabit - sensitive information disclosure
- CVE-2022-3477 tagDiv Composer < 3.5 - Unauthenticated Account Takeover
- CVE-2022-34769 Michlol - rashim web interface Insecure direct object references (IDOR)
- CVE-2022-34768 Synel - eHarmony Stored XSS
- CVE-2022-34767 ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass
- CVE-2022-34765 Other in OPC UA Modicon Communication Module
- CVE-2022-34764 Memory corruption in OPC UA Modicon Communication Module
- CVE-2022-34763 Security feature bypass in OPC UA Modicon Communication Module
- CVE-2022-34762 Path traversal in OPC UA Modicon Communication Module
- CVE-2022-34761 Null dereference in OPC UA Modicon Communication Module
- CVE-2022-34760 Denial of service in OPC UA Modicon Communication Module
- CVE-2022-34759 Memory corruption in OPC UA Modicon Communication Module
- CVE-2022-34758 Security feature bypass in Easergy P5
- CVE-2022-34757 Weak cryptography in Easergy P5
- CVE-2022-34756 Memory corruption in Easergy P5
- CVE-2022-34755 Other in Easergy Builder Installer
- CVE-2022-34754 Privilege escalation in Acti9 PowerTag Link C
- CVE-2022-34753 Command injection in SpaceLogic C-Bus Home Controller
- CVE-2022-34750 Denial of service in mediawiki:mediawiki
- CVE-2022-34749 Mistune vulnerable to catastrophic backtracking
- CVE-2022-34748 Memory corruption in Simcenter Femap
- CVE-2022-34747 Memory corruption in Zyxel NAS326 firmware
- CVE-2022-34746 Weak cryptography in Zyxel GS1900 series firmware
- CVE-2022-34743 Memory corruption in EMUI
- CVE-2022-34742 Memory corruption in EMUI
- CVE-2022-34741 Memory corruption in EMUI
- CVE-2022-34740 Memory corruption in EMUI
- CVE-2022-3474 Bazel leaks user credentials through the remote assets API
- CVE-2022-34739 Integer overflow in EMUI
- CVE-2022-34738 Missing authorization in EMUI