Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 308 of 437.
- CVE-2022-32517 Other in Conext™ ComBox
- CVE-2022-32516 Cross-site request forgery in Conext™ ComBox
- CVE-2022-32515 Auth bypass in Conext™ ComBox
- CVE-2022-32514 Auth bypass in C-Bus Network Automation Controller, LSS5500NAC
- CVE-2022-32513 Weak cryptography in C-Bus Network Automation Controller, LSS5500NAC
- CVE-2022-32512 Memory corruption in CanBRASS
- CVE-2022-32511 JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable
- CVE-2022-32510 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-3251 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca
- CVE-2022-32509 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32508 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32507 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32506 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32505 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32504 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32503 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32502 An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-3250 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb
- CVE-2022-32498 Privilege escalation in PowerStore
- CVE-2022-32493 Memory corruption in CPG BIOS
- CVE-2022-32492 Other in CPG BIOS
- CVE-2022-32491 Memory corruption in CPG BIOS
- CVE-2022-32490 Other in BIOS
- CVE-2022-3249 WP CSV Exporter < 1.3.7 - Admin+ SQLi
- CVE-2022-32489 Other in CPG BIOS
- CVE-2022-32488 Other in CPG BIOS
- CVE-2022-32487 Other in CPG BIOS
- CVE-2022-32486 Other in CPG BIOS
- CVE-2022-32485 Other in CPG BIOS
- CVE-2022-32484 Other in CPG BIOS
- CVE-2022-32483 Other in CPG BIOS
- CVE-2022-32482 Other in CPG BIOS
- CVE-2022-32481 Privilege escalation in Cyber Recovery
- CVE-2022-32480 Misconfiguration in PowerScale OneFS
- CVE-2022-3248 Openshift api admission checks does not enforce "custom-host" permissions
- CVE-2022-32478 Race condition in insyde:insydeh2o
- CVE-2022-32477 Race condition in insyde:insydeh2o
- CVE-2022-32476 Race condition in insyde:insydeh2o
- CVE-2022-32475 Race condition in insyde:insydeh2o
- CVE-2022-32474 Race condition in insyde:insydeh2o
- CVE-2022-32473 Race condition in insyde:insydeh2o
- CVE-2022-32471 Race condition in insyde:insydeh2o
- CVE-2022-32470 Race condition in insyde:insydeh2o
- CVE-2022-3247 Blog2Social < 6.9.10 - Subscriber+ SSRF
- CVE-2022-32469 Race condition in insyde:insydeh2o
- CVE-2022-3246 Blog2Social < 6.9.10 - Subscriber+ SQLi
- CVE-2022-32458 Data Systems Consulting Co., Ltd. BPM - XML External Entity (XXE) Injection
- CVE-2022-32457 Data Systems Consulting Co., Ltd. BPM - Blind Server-Side Request Forgery (SSRF)
- CVE-2022-32456 Data Systems Consulting Co., Ltd. BPM - SQL Injection
- CVE-2022-32455 TMM vulnerability CVE-2022-32455
- CVE-2022-32454 Memory corruption in iota All-In-One Security Kit
- CVE-2022-32453 Other in Cybozu Office
- CVE-2022-32450 Privilege escalation in anydesk:anydesk
- CVE-2022-3245 Code Injection in display of tag title on saving tags in microweber/microweber
- CVE-2022-32449 Command injection in totolink:ex300 v2 firmware
- CVE-2022-32444 Open redirect in yuba:u5cms
- CVE-2022-32442 Cross-site scripting in yuba:u5cms
- CVE-2022-32441 Memory corruption in hex-rays:ida
- CVE-2022-3244 Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation
- CVE-2022-32434 Memory corruption in opener project:opener
- CVE-2022-32433 File upload in advanced school management system project:advanced school management system
- CVE-2022-32430 Hardcoded JWT Token in Lin CMS Spring Boot
- CVE-2022-3243 Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi
- CVE-2022-32429 Auth bypass in megatech:msnswitch firmware
- CVE-2022-32427 Path traversal in printerlogic:windows client
- CVE-2022-32425 Information disclosure in mealie:mealie
- CVE-2022-32420 File upload in college management system project:college management system
- CVE-2022-3242 HTML code Injection in template search keyword in microweber/microweber
- CVE-2022-32417 Code injection in pbootcms:pbootcms
- CVE-2022-32416 SQL injection in product show room site project:product show room site
- CVE-2022-32415 SQL injection in product show room site project:product show room site
- CVE-2022-32414 Use after free in f5:njs
- CVE-2022-32413 File upload in dice project:dice
- CVE-2022-32412 Code injection in hongcms project:hongcms
- CVE-2022-32411 Code injection in hongcms project:hongcms
- CVE-2022-3241 Build App Online < 1.0.19 - Unauthenticated SQL Injection
- CVE-2022-32409 Path traversal in softwarepublico:i3geo
- CVE-2022-32407 Cross-site scripting in softr:softr
- CVE-2022-32406 Memory corruption in gtkradiant project:gtkradiant
- CVE-2022-32405 SQL injection in prison management system project:prison management system
- CVE-2022-32404 SQL injection in prison management system project:prison management system
- CVE-2022-32403 SQL injection in prison management system project:prison management system
- CVE-2022-32402 SQL injection in prison management system project:prison management system
- CVE-2022-32401 SQL injection in prison management system project:prison management system
- CVE-2022-32400 SQL injection in prison management system project:prison management system
- CVE-2022-3240 Follow Me Plugin <= 3.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-32399 SQL injection in prison management system project:prison management system
- CVE-2022-32398 SQL injection in prison management system project:prison management system
- CVE-2022-32397 SQL injection in prison management system project:prison management system
- CVE-2022-32396 SQL injection in prison management system project:prison management system
- CVE-2022-32395 SQL injection in prison management system project:prison management system
- CVE-2022-32394 SQL injection in prison management system project:prison management system
- CVE-2022-32393 SQL injection in prison management system project:prison management system
- CVE-2022-32392 SQL injection in prison management system project:prison management system
- CVE-2022-32391 SQL injection in prison management system project:prison management system
- CVE-2022-3239 Use after free in Kernel
- CVE-2022-32389 Hardcoded credentials in isode:swift
- CVE-2022-32387 Denial of service in kentico:xperience
- CVE-2022-32386 Memory corruption in tendacn:ac23 ac2100 firmware
- CVE-2022-32385 Memory corruption in tendacn:ac23 ac2100 firmware