Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 297 of 437.
- CVE-2022-34185 Cross-site Scripting in Jenkins Date Parameter Plugin
- CVE-2022-34184 Cross-site Scripting in Jenkins CRX Content Package Deployer Plugin
- CVE-2022-34183 Cross-site Scripting in Jenkins Agent Server Parameter Plugin
- CVE-2022-34182 Reflected Cross-site Scripting in Jenkins Nested View Plugin
- CVE-2022-34181 Agent-to-controller security bypass in Jenkins xUnit Plugin
- CVE-2022-34180 Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement
- CVE-2022-3418 WP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE
- CVE-2022-34179 Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin
- CVE-2022-34178 Reflected Cross site scripting in Jenkins Embeddable Build Status Plugin
- CVE-2022-34177 Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin
- CVE-2022-34176 Cross-site Scripting in Jenkins JUnit Plugin
- CVE-2022-34175 Unauthorized view fragment access in Jenkins
- CVE-2022-34174 Observable timing discrepancy allows determining username validity in Jenkins
- CVE-2022-34173 Cross-site Scripting vulnerability in Jenkins
- CVE-2022-34172 Cross-site Scripting vulnerability in Jenkins
- CVE-2022-34171 Cross-site Scripting vulnerability in Jenkins
- CVE-2022-34170 Cross-site Scripting vulnerability in Jenkins
- CVE-2022-3417 WPtouch < 4.3.45 - Admin+ PHP Object Injection
- CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
- CVE-2022-34167 Cross-site scripting in CICS TX Advanced
- CVE-2022-34166 Cross-site scripting in CICS TX Advanced
- CVE-2022-34165 Other in WebSphere Application Server
- CVE-2022-34164 Auth bypass in CICS TX Advanced
- CVE-2022-34163 Cross-site scripting in CICS TX Advanced
- CVE-2022-34162 Other in CICS TX Advanced
- CVE-2022-34161 Cross-site request forgery in CICS TX Advanced
- CVE-2022-34160 Cross-site scripting in CICS TX Advanced
- CVE-2022-3416 WPtouch < 4.3.45 - Admin+ Arbitrary File Upload
- CVE-2022-34159 Denial of service in CV81-WDM FW
- CVE-2022-34158 User Group Privilege Escalation
- CVE-2022-34157 Privilege escalation in Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software
- CVE-2022-34156 Weak cryptography in 'Hulu / フールー' App for iOS
- CVE-2022-34155 WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication
- CVE-2022-34154 WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability
- CVE-2022-34153 Privilege escalation in Intel(R) Battery Life Diagnostic Tool software
- CVE-2022-34152 Privilege escalation in Intel(R) NUC Boards, Intel(R) NUC Kits
- CVE-2022-34151 Hardcoded credentials in Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series
- CVE-2022-34150 ICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key
- CVE-2022-3415 Chat Bubble < 2.3 - Unauthenticated Stored Cross-Site Scripting
- CVE-2022-34149 WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability
- CVE-2022-34148 WordPress Backup Guard Plugin <= 1.6.9.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-34147 Privilege escalation in Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element
- CVE-2022-34146 Improper input validation in WLAN Host
- CVE-2022-34145 Buffer over-read in WLAN Host
- CVE-2022-34144 Reachable assertion in Modem
- CVE-2022-34140 Feehi CMS Cross-site Scripting
- CVE-2022-3414 SourceCodester Web-Based Student Clearance System POST Parameter login.php sql injection
- CVE-2022-34138 Missing authorization in biltema:baby camera firmware
- CVE-2022-34134 Cross-site request forgery in jorani:jorani
- CVE-2022-34133 Cross-site scripting in jorani:jorani
- CVE-2022-34132 SQL injection in jorani:jorani
- CVE-2022-3413 Missing authorization in GitLab
- CVE-2022-34128 File upload in glpi-project:positions
- CVE-2022-34127 Path traversal in glpi-project:manageentities
- CVE-2022-34126 Path traversal in glpi-project:activity
- CVE-2022-34125 Path traversal in glpi-project:cmdb
- CVE-2022-34121 Path traversal in cuppacms:cuppacms
- CVE-2022-34120 File upload in barangay management system project:barangay management system
- CVE-2022-34115 Dataease v1.11.1 SQL Injection via parameter dataSourceId
- CVE-2022-34114 SQL Injection found in Dataease
- CVE-2022-34113 Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
- CVE-2022-34112 Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
- CVE-2022-34110 Path traversal in msi:micro-star international feature navigator
- CVE-2022-3411 Denial of service in GitLab
- CVE-2022-34109 Other in msi:micro-star international feature navigator
- CVE-2022-34108 Denial of service in msi:micro-star international feature navigator
- CVE-2022-34102 Privilege escalation in crestron:airmedia
- CVE-2022-34101 Privilege escalation in crestron:airmedia
- CVE-2022-34100 Privilege escalation in crestron:airmedia
- CVE-2022-34094 Cross-site scripting in softwarepublico:i3geo
- CVE-2022-34093 Cross-site scripting in softwarepublico:i3geo
- CVE-2022-34092 Cross-site scripting in softwarepublico:i3geo
- CVE-2022-3409 Unauthenticated out of bounds stack write in bmcweb
- CVE-2022-3408 WP Word Count <= 3.2.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-3407 Denial of service in Motorola smartphones
- CVE-2022-34067 SQL injection in oretnom23:warehouse management system
- CVE-2022-34066 Supply chain in texercise project:texercise
- CVE-2022-34065 Supply chain in rondolu-yt-concate project:rondolu-yt-concate
- CVE-2022-34064 Supply chain in zibal project:zibal
- CVE-2022-34061 Supply chain in catly translate project:catly translate
- CVE-2022-34060 Supply chain in togglee:togglee
- CVE-2022-34059 Supply chain in sixfab-tool project:sixfab-tool
- CVE-2022-34057 Supply chain in scoptrial project:scoptrial
- CVE-2022-34056 Supply chain in pypi:watertools
- CVE-2022-34055 Supply chain in pypi:drxhello
- CVE-2022-34054 Supply chain in pypi:perdido
- CVE-2022-34053 Supply chain in pypi:dr-web-engine
- CVE-2022-3405 Privilege escalation in Acronis Cyber Backup 12.5
- CVE-2022-34049 Missing authorization in wavlink:wl-wn530hg4 firmware
- CVE-2022-34048 Cross-site scripting in wavlink:wn533a8 firmware
- CVE-2022-34047 Information disclosure in wavlink:wl-wn530hg4 firmware
- CVE-2022-34046 Information disclosure in wavlink:wn533a8 firmware
- CVE-2022-34045 Hardcoded credentials in wavlink:wl-wn530hg4 firmware
- CVE-2022-34043 Misconfiguration in nomachine:nomachine
- CVE-2022-34042 SQL injection in barangay management system project:barangay management system
- CVE-2022-34038 Memory corruption in etcd:etcd
- CVE-2022-34037 Denial of service in caddyserver:caddy
- CVE-2022-34035 Memory corruption in htmldoc project:htmldoc
- CVE-2022-34033 Memory corruption in htmldoc project:htmldoc
- CVE-2022-34032 Memory corruption in f5:njs