Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 311 of 437.
- CVE-2022-32154 Risky commands warnings in Splunk Enterprise Dashboards
- CVE-2022-32153 Splunk Enterprise lacked TLS host name validation
- CVE-2022-32152 Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default
- CVE-2022-32151 Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default
- CVE-2022-3215 SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
- CVE-2022-32149 Denial of service via crafted Accept-Language header in golang.org/x/text/language
- CVE-2022-32148 Exposure of client IP addresses in net/http
- CVE-2022-32145 Cross-site scripting in Teamcenter Active Workspace V5.2
- CVE-2022-32144 Other in CV81-WDM FW
- CVE-2022-32143 CODESYS runtime system prone to directory acces
- CVE-2022-32142 CODESYS runtime system prone to denial of service due to use of out of range pointer
- CVE-2022-32141 CODESYS runtime system prone to denial of service due to buffer over read
- CVE-2022-32140 CODESYS runtime system prone to denial of service due to buffer copy
- CVE-2022-3214 Delta Electronics DIAEnergy Use of Hard-coded Credentials
- CVE-2022-32139 CODESYS runtime system prone to denial of service due to out of bounds read
- CVE-2022-32138 CODESYS runtime system prone to denial of service due to Unexpected Sign Extension
- CVE-2022-32137 CODESYS Runtime System prone to heap based buffer overflow
- CVE-2022-32136 Codesys runtime systems: Access of uninitialised pointer lead to denial of service.
- CVE-2022-32131 Cross-site scripting in 74cms:74cmsse
- CVE-2022-32130 Cross-site scripting in 74cms:74cmsse
- CVE-2022-3213 Memory corruption in ImageMagick
- CVE-2022-32129 Cross-site scripting in 74cms:74cmsse
- CVE-2022-32128 Cross-site scripting in 74cms:74cmsse
- CVE-2022-32127 Cross-site scripting in 74cms:74cmsse
- CVE-2022-32126 Cross-site scripting in 74cms:74cmsse
- CVE-2022-32125 Cross-site scripting in 74cms:74cmsse
- CVE-2022-32124 Cross-site scripting in 74cms:74cmsse
- CVE-2022-3212 DoS in axum-core due to missing request size limit
- CVE-2022-32119 File upload in arox:school erp pro
- CVE-2022-32118 Cross-site scripting in arox:school erp pro
- CVE-2022-32117 Memory corruption in jerryscript:jerryscript
- CVE-2022-32115 Known vulnerable to code execution via SVG file in v1.3.1
- CVE-2022-32114 Strapi 4.1.12 Cross-site Scripting via crafted file
- CVE-2022-3211 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-32101 SQL injection in kkcms project:kkcms
- CVE-2022-3210 Command injection in DIR-2150
- CVE-2022-32096 Memory corruption in rhonabwy project:rhonabwy
- CVE-2022-32095 SQL injection in hospital management system project:hospital management system
- CVE-2022-32094 SQL injection in hospital management system project:hospital management system
- CVE-2022-32093 SQL injection in hospital management system project:hospital management system
- CVE-2022-32092 Command injection in dlink:dir-645 firmware
- CVE-2022-32091 Use after free in debian:debian linux
- CVE-2022-3209 Soledad < 8.2.5 - Reflected Cross-site Scripting
- CVE-2022-32089 Null dereference in fedoraproject:fedora
- CVE-2022-32088 Memory corruption in debian:debian linux
- CVE-2022-32087 Memory corruption in debian:debian linux
- CVE-2022-32086 Memory corruption in mariadb:mariadb
- CVE-2022-32085 Memory corruption in debian:debian linux
- CVE-2022-32084 Memory corruption in debian:debian linux
- CVE-2022-32083 Memory corruption in debian:debian linux
- CVE-2022-32082 Denial of service in fedoraproject:fedora
- CVE-2022-32081 Use after free in fedoraproject:fedora
- CVE-2022-3208 Simple File List < 4.4.13 - Page Creation via CSRF
- CVE-2022-32074 Cross-site scripting in enhancesoft:osticket
- CVE-2022-32073 Integer overflow in wolfssh:wolfssh
- CVE-2022-3207 Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting
- CVE-2022-32065 RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module
- CVE-2022-32061 Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
- CVE-2022-32060 Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
- CVE-2022-3206 Passster < 3.5.5.5.2 - Insecure Storage of Password
- CVE-2022-32058 Denial of service in tp-link:tl-wr741n firmware
- CVE-2022-32056 SQL injection in online accreditation management system project:online accreditation management system
- CVE-2022-32055 SQL injection in nesote:inout homestay
- CVE-2022-32054 Command injection in tenda:ac10 firmware
- CVE-2022-32053 Memory corruption in totolink:t6 firmware
- CVE-2022-32052 Memory corruption in totolink:t6 firmware
- CVE-2022-32051 Memory corruption in totolink:t6 firmware
- CVE-2022-32050 Memory corruption in totolink:t6 firmware
- CVE-2022-3205 Controller: cross site scripting in automation controller ui
- CVE-2022-32049 Memory corruption in totolink:t6 firmware
- CVE-2022-32048 Memory corruption in totolink:t6 firmware
- CVE-2022-32047 Memory corruption in totolink:t6 firmware
- CVE-2022-32046 Memory corruption in totolink:t6 firmware
- CVE-2022-32045 Memory corruption in totolink:t6 firmware
- CVE-2022-32044 Memory corruption in totolink:t6 firmware
- CVE-2022-32043 Memory corruption in tenda:m3 firmware
- CVE-2022-32041 Memory corruption in tenda:m3 firmware
- CVE-2022-32040 Memory corruption in tenda:m3 firmware
- CVE-2022-3204 NRDelegation Attack
- CVE-2022-32039 Memory corruption in tenda:m3 firmware
- CVE-2022-32037 Memory corruption in tenda:m3 firmware
- CVE-2022-32036 Memory corruption in tenda:m3 firmware
- CVE-2022-32035 Memory corruption in tenda:m3 firmware
- CVE-2022-32034 Memory corruption in tenda:m3 firmware
- CVE-2022-32033 Memory corruption in tenda:ax1806 firmware
- CVE-2022-32032 Memory corruption in tenda:ax1806 firmware
- CVE-2022-32031 Memory corruption in tenda:ax1806 firmware
- CVE-2022-32030 Memory corruption in tenda:ax1806 firmware
- CVE-2022-3203 ORing net IAP-420(+) Hidden Functionality
- CVE-2022-32028 SQL injection in car rental management system project:car rental management system
- CVE-2022-32027 SQL injection in car rental management system project:car rental management system
- CVE-2022-32026 SQL injection in car rental management system project:car rental management system
- CVE-2022-32025 SQL injection in car rental management system project:car rental management system
- CVE-2022-32024 SQL injection in car rental management system project:car rental management system
- CVE-2022-32022 SQL injection in car rental management system project:car rental management system
- CVE-2022-32021 SQL injection in car rental management system project:car rental management system
- CVE-2022-32020 Code injection in car rental management system project:car rental management system
- CVE-2022-3202 Null dereference in Kernel
- CVE-2022-32019 File upload in car rental management system project:car rental management system
- CVE-2022-32018 SQL injection in complete online job search system project:complete online job search system