Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 301 of 437.
- CVE-2022-3363 Business Logic Errors in ikus060/rdiffweb
- CVE-2022-3362 Insufficient Session Expiration in ikus060/rdiffweb
- CVE-2022-3361 Path traversal in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
- CVE-2022-3360 LearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST API
- CVE-2022-3359 Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection
- CVE-2022-3358 Using a Custom Cipher with NID_undef may lead to NULL encryption
- CVE-2022-3357 Smart Slider 3 < 3.5.1.11 - PHP Object Injection
- CVE-2022-3355 Cross-site Scripting (XSS) - Stored in inventree/inventree
- CVE-2022-3354 Open5GS UDP Packet ogs-tlv-msg.c denial of service
- CVE-2022-3353 IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
- CVE-2022-3352 Use After Free in vim/vim
- CVE-2022-3351 Information disclosure in GitLab
- CVE-2022-3350 Contact Bank <= 3.0.30 - Admin+ Stored Cross-Site Scripting
- CVE-2022-3349 Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow
- CVE-2022-3348 Exposure of Sensitive Information to an Unauthorized Actor in tooljet/tooljet
- CVE-2022-3347 Incorrect validation of root DNSSEC public keys in github.com/peterzen/goresolver
- CVE-2022-3346 Incorrect DNSSEC validation due to unchecked owner names in github.com/peterzen/goresolver
- CVE-2022-3344 Denial of service in Linux kernel
- CVE-2022-3343 WPQA < 5.9.3 - Missing validation lead to functionality abuse
- CVE-2022-3342 Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization
- CVE-2022-3341 Null dereference in FFmpeg
- CVE-2022-3340 Trellix IPS Manager vulnerable to XXE
- CVE-2022-3339 Reflected XSS in Trellix ePO server
- CVE-2022-3338 XXE in Trellix ePO server
- CVE-2022-3337 Lock WARP switch bypass by removing VPN profile on iOS mobile client
- CVE-2022-3336 Event Monster < 1.2.0 - Visitors Deletion via CSRF
- CVE-2022-3335 Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection
- CVE-2022-3334 Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injection
- CVE-2022-3333 Zephyr Project Manager REST Call cross site scripting
- CVE-2022-33329 Command injection in R1510
- CVE-2022-33328 Command injection in R1510
- CVE-2022-33327 Command injection in R1510
- CVE-2022-33326 Command injection in R1510
- CVE-2022-33325 Command injection in R1510
- CVE-2022-33324 Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series
- CVE-2022-33323 Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series
- CVE-2022-33322 Cross-site scripting in Air Conditioning MFZ-GXT50/60/73VFK
- CVE-2022-33321 Information disclosure in Air Conditioning MFZ-GXT50/60/73VFK
- CVE-2022-33320 Deserialization in GENESIS64
- CVE-2022-3332 SourceCodester Food Ordering Management System POST Parameter router.php sql injection
- CVE-2022-33319 Memory corruption in GENESIS32
- CVE-2022-33318 Deserialization in GENESIS32
- CVE-2022-33317 Code injection in GENESIS64
- CVE-2022-33316 Deserialization in GENESIS64
- CVE-2022-33315 Deserialization in GENESIS64
- CVE-2022-33314 Command injection in R1510
- CVE-2022-33313 Command injection in R1510
- CVE-2022-33312 Command injection in R1510
- CVE-2022-33311 Missing authorization in Cybozu Office
- CVE-2022-3331 Missing authorization in GitLab
- CVE-2022-33309 Buiffer over-read in WLAN Firmware.
- CVE-2022-33307 Double free in Automotive
- CVE-2022-33306 Buffer over-read in WLAN
- CVE-2022-33305 Null pointer dereference in Modem
- CVE-2022-33304 NULL pointers dereference in Modem
- CVE-2022-33303 Uncontrolled resource consumption in Linux kernel
- CVE-2022-33302 Improper validation of array index in User Identity Module
- CVE-2022-33301 Incorrect type conversion or cast in Audio
- CVE-2022-33300 Improper input validation in Automotive Android OS
- CVE-2022-3330 Missing authorization in GitLab
- CVE-2022-33299 Null pointer dereference in Bluetooth HOST
- CVE-2022-33298 Use after free in Modem
- CVE-2022-33297 Buffer overread in Linux Sensors
- CVE-2022-33296 Integer overflow to buffer overflow in Modem
- CVE-2022-33295 Buffer over-read in Modem
- CVE-2022-33294 NULL pointer dereference in Modem
- CVE-2022-33292 Use after free in Qualcomm IPC
- CVE-2022-33291 Buffer over-read in Modem
- CVE-2022-33290 Null pointer dereference in Bluetooth HOST
- CVE-2022-33289 Improper validation of array index in Modem
- CVE-2022-33288 Buffer copy without checking the size of input in Core
- CVE-2022-33287 Buffer over-read in Modem
- CVE-2022-33286 Buffer over-read in WLAN
- CVE-2022-33285 Buffer over-read in WLAN
- CVE-2022-33284 Buffer over-read in WLAN
- CVE-2022-33283 Buffer over-read in WLAN
- CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia
- CVE-2022-33281 Improper validation of array index in computer vision.
- CVE-2022-33280 Access of uninitialized pointer in Bluetooth HOST
- CVE-2022-3328 snapd Race Condition vulnerability
- CVE-2022-33279 Stack based buffer overflow in WLAN
- CVE-2022-33278 Buffer copy without checking the size of input in HLOS
- CVE-2022-33277 Buffer copy without checking size of input in modem
- CVE-2022-33276 Buffer copy without checking size of input in Modem
- CVE-2022-33275 Improper validation of array index in WLAN HAL
- CVE-2022-33274 Improper validation of array index in Android Core
- CVE-2022-33273 Buffer over-read in Trusted Execution Environment
- CVE-2022-33272 Reachable assertion in Modem
- CVE-2022-33271 Buffer over-read in WLAN
- CVE-2022-33270 Time-of-check time-of-use race condition in Modem
- CVE-2022-3327 Missing Authentication for Critical Function in ikus060/rdiffweb
- CVE-2022-33269 Integer overflow or wraparound in Core
- CVE-2022-33268 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2022-33267 Improper restriction of operations within the bounds of memory buffer in Linux
- CVE-2022-33266 Integer overflow to buffer overflow in Audio
- CVE-2022-33265 Information exposure in Powerline Communication Firmware
- CVE-2022-33264 Stack-based buffer overflow in Modem
- CVE-2022-33263 Use after free in Core
- CVE-2022-33260 Stack based buffer overflow in Core
- CVE-2022-3326 Weak Password Requirements in ikus060/rdiffweb