Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 310 of 437.
- CVE-2022-32268 Command injection in starwindsoftware:starwind san \& nas
- CVE-2022-32267 Race condition in insyde:kernel
- CVE-2022-32266 Race condition in insyde:kernel
- CVE-2022-32265 Other in qdecoder project:qdecoder
- CVE-2022-32264 Denial of service in freebsd:freebsd
- CVE-2022-32263 Denial of service in pexip:pexip infinity
- CVE-2022-32262 Command injection in SINEMA Remote Connect Server
- CVE-2022-32261 Misconfiguration in SINEMA Remote Connect Server
- CVE-2022-32260 Auth bypass in SINEMA Remote Connect Server
- CVE-2022-3226 Command injection in Sophos Firewall
- CVE-2022-32259 Hardcoded credentials in SINEMA Remote Connect Server
- CVE-2022-32258 Information disclosure in SINEMA Remote Connect Server
- CVE-2022-32257 Missing authorization in SINEMA Remote Connect Server
- CVE-2022-32256 Missing authorization in SINEMA Remote Connect Server
- CVE-2022-32255 Missing authorization in SINEMA Remote Connect Server
- CVE-2022-32254 Information disclosure in SINEMA Remote Connect Server
- CVE-2022-32253 Information disclosure in SINEMA Remote Connect Server
- CVE-2022-32252 Security feature bypass in SINEMA Remote Connect Server
- CVE-2022-32251 Missing authorization in SINEMA Remote Connect Server
- CVE-2022-32250 Use after free in debian:debian linux
- CVE-2022-3225 Improper Control of Dynamically-Managed Code Resources in budibase/budibase
- CVE-2022-32249 Information disclosure in SAP Business one
- CVE-2022-32248 Other in SAP S/4HANA
- CVE-2022-32247 Cross-site scripting in SAP NetWeaver Enterprise Portal
- CVE-2022-32246 SQL injection in SAP BusinessObjects Business Intelligence Platform (Visual Difference Application)
- CVE-2022-32245 Information disclosure in SAP BusinessObjects Business Intelligence Platform (Open Document)
- CVE-2022-32244 Information disclosure in SAP BusinessObjects Business Intelligence Platform (Commentary DB)
- CVE-2022-32243 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-32242 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-32241 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-32240 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-3224 Misinterpretation of Input in ionicabizau/parse-url
- CVE-2022-32239 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-32238 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-32237 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-32236 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-32235 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-32234 Memory corruption in Hermes
- CVE-2022-32231 Privilege escalation in Intel(R) Processors
- CVE-2022-32230 SMBv3 FileNormalizedNameInformation NULL Pointer Dereference
- CVE-2022-3223 Cross-site Scripting (XSS) - Stored in jgraph/drawio
- CVE-2022-32229 Information disclosure in Rocket.Chat
- CVE-2022-32228 Information disclosure in Rocket.Chat
- CVE-2022-32227 Information disclosure in Rocket.Chat
- CVE-2022-32226 Missing authorization in Rocket.Chat
- CVE-2022-32225 Cross-site scripting in Veeam Management Pack for Microsoft System Center
- CVE-2022-32224 Active Record RCE bug with Serialized Columns
- CVE-2022-32223 Other in Node
- CVE-2022-32222 Misconfiguration in Node
- CVE-2022-32221 Use after free in https://github.com/curl/curl
- CVE-2022-32220 Missing authorization in Rocket.Chat
- CVE-2022-3222 Uncontrolled Recursion in gpac/gpac
- CVE-2022-32219 Information disclosure in Rocket.Chat
- CVE-2022-32218 Information disclosure in Rocket.chat
- CVE-2022-32217 Information disclosure in Rocket.chat
- CVE-2022-32215 Other in Node
- CVE-2022-32214 llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields
- CVE-2022-32213 llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
- CVE-2022-32212 Command injection in Node
- CVE-2022-32211 SQL injection in Rocket.Chat
- CVE-2022-32210 ProxyAgent vulnerable to MITM
- CVE-2022-3221 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
- CVE-2022-32209 Rails::Html::Sanitizer vulnerable to Cross-site Scripting
- CVE-2022-32208 Security feature bypass in https://github.com/curl/curl
- CVE-2022-32207 Misconfiguration in https://github.com/curl/curl
- CVE-2022-32206 Denial of service in https://github.com/curl/curl
- CVE-2022-32205 Denial of service in https://github.com/curl/curl
- CVE-2022-32204 Other in CV81-WDM FW
- CVE-2022-32203 Command injection in CV81-WDM FW
- CVE-2022-32202 Null dereference in libjpeg project:libjpeg
- CVE-2022-32201 Null dereference in libjpeg project:libjpeg
- CVE-2022-32200 Memory corruption in libdwarf project:libdwarf
- CVE-2022-3220 Advanced Comment Form < 1.2.1 - Admin+ Authenticated Stored XSS
- CVE-2022-32199 Path traversal in scriptcase:scriptcase
- CVE-2022-32195 Cross-site scripting in edx:open edx
- CVE-2022-32193 Information disclosure in couchbase:couchbase server
- CVE-2022-32192 Information disclosure in couchbase:couchbase server
- CVE-2022-32190 Failure to strip relative path components in net/url
- CVE-2022-3219 Denial of service in gnupg
- CVE-2022-32189 Panic when decoding Float and Rat types in math/big
- CVE-2022-3218 Necta WiFi Mouse (Mouse Server) client-side authentication bypass
- CVE-2022-32177 Gin-vue-admin - Unrestricted File Upload
- CVE-2022-32176 Gin-vue-admin - Unrestricted File Upload
- CVE-2022-32175 AdGuardHome - CSRF
- CVE-2022-32174 Gogs - XSS
- CVE-2022-32173 OrchardCore - HTML Injection
- CVE-2022-32172 Zinc - Cross-Site Scripting
- CVE-2022-32171 Zinc - Stored XSS
- CVE-2022-32170 bytebase - Improper Authorization
- CVE-2022-3217 Weak cryptography in VISAM VBASE
- CVE-2022-32169 bytebase - Improper Authorization
- CVE-2022-32168 notepad-plus-plus - DLL Hijacking
- CVE-2022-32167 Cloudreve - Stored XSS
- CVE-2022-32166 ovs - buffer over-read
- CVE-2022-3216 Nintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruption
- CVE-2022-32159 Openlibrary - Stored XSS
- CVE-2022-32158 Splunk Enterprise deployment servers allow client publishing of forwarder bundles
- CVE-2022-32157 Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads
- CVE-2022-32156 Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation
- CVE-2022-32155 Universal Forwarder management services allows remote login by default