Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 298 of 437.
- CVE-2022-34031 Memory corruption in f5:njs
- CVE-2022-34030 Memory corruption in f5:njs
- CVE-2022-34029 Memory corruption in f5:njs
- CVE-2022-34028 Memory corruption in f5:njs
- CVE-2022-34027 Memory corruption in f5:njs
- CVE-2022-34026 ICEcoder vulnerable to Path Traversal
- CVE-2022-34025 Cross-site scripting in vestacp:vesta control panel
- CVE-2022-34024 File upload in barangay management system project:barangay management system
- CVE-2022-34023 SQL injection in barangay management system project:barangay management system
- CVE-2022-34022 SQL injection in resiot:iot platform and lorawan network server
- CVE-2022-34021 Cross-site scripting in resiot:iot platform and lorawan network server
- CVE-2022-34020 Cross-site request forgery in resiot:iot platform and lorawan network server
- CVE-2022-3402 Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting
- CVE-2022-34013 Server-side request forgery in zhyd:oneblog
- CVE-2022-34012 Privilege escalation in zhyd:oneblog
- CVE-2022-34011 Server-side request forgery in zhyd:oneblog
- CVE-2022-3401 Code injection in Bricks
- CVE-2022-34009 Denial of service in fossil-scm:fossil
- CVE-2022-34008 Privilege escalation in comodo:antivirus
- CVE-2022-34007 Cross-site scripting in eqs:integrity line
- CVE-2022-34006 Misconfiguration in southrivertech:titan ftp server nextgen
- CVE-2022-34005 Hardcoded credentials in southrivertech:titan ftp server nextgen
- CVE-2022-34002 Path traversal in pdssoftware:pds vista 7
- CVE-2022-34001 XML external entity in unit4:enterprise resource planning
- CVE-2022-34000 Denial of service in libjxl project:libjxl
- CVE-2022-3400 Missing authorization in Bricks
- CVE-2022-33996 Privilege escalation in devolutions:devolutions server
- CVE-2022-33995 Path traversal in devolutions:remote desktop manager
- CVE-2022-33994 Cross-site scripting in gutenberg project:gutenberg
- CVE-2022-33993 Other in domain name relay daemon project:domain name relay daemon
- CVE-2022-33992 Security feature bypass in domain name relay daemon project:domain name relay daemon
- CVE-2022-33991 Security feature bypass in dproxy-nexgen project:dproxy-nexgen
- CVE-2022-33990 Other in dproxy-nexgen project:dproxy-nexgen
- CVE-2022-3399 Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2022-33989 Weak cryptography in dproxy-nexgen project:dproxy-nexgen
- CVE-2022-33988 Other in dproxy-nexgen project:dproxy-nexgen
- CVE-2022-33987 Got allows a redirect to a UNIX socket
- CVE-2022-33986 Race condition in insyde:kernel
- CVE-2022-33985 Race condition in insyde:kernel
- CVE-2022-33984 Race condition in insyde:kernel
- CVE-2022-33983 Race condition in insyde:kernel
- CVE-2022-33982 Race condition in insyde:kernel
- CVE-2022-33981 Use after free in debian:debian linux
- CVE-2022-33980 Apache Commons Configuration insecure interpolation defaults
- CVE-2022-3398 OMRON CX-Programmer Out-of-bounds Write
- CVE-2022-33978 WordPress FontMeister plugin <= 1.08 - Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2022-33977 untangle vulnerable to XML Entity Expansion
- CVE-2022-33974 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-33973 Information disclosure in Intel(R) WAPI Security software for Windows 10/11
- CVE-2022-33972 Weak cryptography in 3rd Generation Intel(R) Xeon(R) Scalable Processors
- CVE-2022-33971 Auth bypass in Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series
- CVE-2022-33970 WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability
- CVE-2022-3397 OMRON CX-Programmer Out-of-bounds Write
- CVE-2022-33969 WordPress Flipbox plugin <= 2.6.0 - Authenticated WordPress Options Change vulnerability
- CVE-2022-33968 BIG-IP LTM and APM NTLM vulnerability CVE-2022-33968
- CVE-2022-33967 Memory corruption in U-Boot
- CVE-2022-33965 WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities
- CVE-2022-33964 Other in Intel(R) SUR software
- CVE-2022-33963 Misconfiguration in software installer for Intel(R) Unite(R) Client software for Windows
- CVE-2022-33962 BIG-IP iRule vulnerability CVE-2022-33962
- CVE-2022-33961 WordPress YellowPencil Visual CSS Style Editor Plugin <= 7.5.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-33960 SQL injection in Social Share Buttons by Supsystic (WordPress plugin)
- CVE-2022-3396 OMRON CX-Programmer Out-of-bounds Write
- CVE-2022-33959 IBM Sterling Order Management privilege escalation
- CVE-2022-33955 Command injection in CICS TX Advanced
- CVE-2022-33954 IBM Robotic Process Automation information disclosure
- CVE-2022-33953 Information disclosure in Robotic Process Automation
- CVE-2022-3395 WP All Export Pro < 1.7.9 - Authenticated SQLi
- CVE-2022-33948 Command injection in HOME SPOT CUBE2
- CVE-2022-33947 BIG-IP DNS TMUI Vulnerability CVE-2022-33947
- CVE-2022-33946 Auth bypass in Intel(R) SUR software
- CVE-2022-33945 Privilege escalation in Intel(R) Server board and Intel(R) Server System BIOS firmware
- CVE-2022-33944 ICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key
- CVE-2022-33943 WordPress BxSlider WP plugin <= 2.0.0 - Authenticated Cross-Site Scripting (XSS) vulnerability
- CVE-2022-33942 Security feature bypass in Intel(R) DCM software
- CVE-2022-33941 Command injection in PowerCMS XMLRPC API
- CVE-2022-3394 WP All Export Pro < 1.7.9 - Authenticated Code Injection
- CVE-2022-33939 Denial of service in CENTUM VP / CS 3000 controller FCS
- CVE-2022-33938 Memory corruption in iota All-In-One Security Kit
- CVE-2022-33937 Path traversal in GeoDrive
- CVE-2022-33936 Command injection in Cloud Mobility for Dell Storage
- CVE-2022-33935 Cross-site scripting in Data Protection Advisor
- CVE-2022-33934 Cross-site scripting in PowerScale OneFS
- CVE-2022-33932 Denial of service in PowerScale OneFS
- CVE-2022-33931 Missing authorization in Wyse Management Suite
- CVE-2022-33930 Information disclosure in Wyse Management Suite
- CVE-2022-3393 Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
- CVE-2022-33929 Cross-site scripting in Wyse Management Suite
- CVE-2022-33928 Information disclosure in Wyse Management Suite
- CVE-2022-33927 Auth bypass in Wyse Management Suite
- CVE-2022-33926 Missing authorization in Wyse Management Suite
- CVE-2022-33925 Missing authorization in Wyse Management Suite
- CVE-2022-33924 Missing authorization in Wyse Management Suite
- CVE-2022-33923 Command injection in PowerStore
- CVE-2022-33922 Misconfiguration in GeoDrive
- CVE-2022-33921 Privilege escalation in GeoDrive
- CVE-2022-33920 Privilege escalation in GeoDrive
- CVE-2022-3392 WP Humans.txt <= 1.0.6 - Admin+ Stored Cross-Site Scripting
- CVE-2022-33919 Information disclosure in GeoDrive
- CVE-2022-33918 Information disclosure in GeoDrive