Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 313 of 437.
- CVE-2022-31861 Cross-site scripting in thingsboard:thingsboard
- CVE-2022-31860 Code injection in openremote:openremote
- CVE-2022-3186 Missing authorization in iBoot-PDU FW
- CVE-2022-31856 SQL injection in newsletter module project:newsletter module
- CVE-2022-31854 File upload in codologic:codoforum
- CVE-2022-3185 Information disclosure in iBoot-PDU FW
- CVE-2022-31849 Code injection in mercurycom:mipc451-4 firmware
- CVE-2022-31847 Information disclosure in wavlink:wn579x3 firmware
- CVE-2022-31846 Information disclosure in wavlink:wn535g3 firmware
- CVE-2022-31845 Information disclosure in wavlink:wn535g3 firmware
- CVE-2022-3184 Path traversal in iBoot-PDU FW
- CVE-2022-31836 Path Traversal in Beego
- CVE-2022-31830 Server-Side Request Forgery in kityminder
- CVE-2022-3183 Command injection in iBoot-PDU FW
- CVE-2022-31827 Server-side request forgery in monstaftp:monstaftp
- CVE-2022-3182 Security feature bypass in Remote Desktop Manager
- CVE-2022-31814 Command injection in netgate:pfblockerng
- CVE-2022-31813 mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
- CVE-2022-31812 Memory corruption in SiPass integrated
- CVE-2022-31810 Memory corruption in SiPass integrated
- CVE-2022-3181 Denial of service in VTScada
- CVE-2022-31808 Command injection in SiPass integrated AC5102 (ACC-G2)
- CVE-2022-31807 Security feature bypass in Building X - Security Manager Edge Controller (ACC-AP)
- CVE-2022-31806 Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT
- CVE-2022-31805 Insecure transmission of credentials
- CVE-2022-31804 CODESYS Gateway server prone to denial of service attack due to excessive memory allocation
- CVE-2022-31803 CODESYS Gateway Server V2 prone to Denial of Service Attack
- CVE-2022-31802 Partial string comparison in CODESYS gateway server
- CVE-2022-31801 Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
- CVE-2022-31800 Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers
- CVE-2022-3180 WPGateway <= 3.5 - Unauthenticated Privilege Escalation
- CVE-2022-31799 Denial of service in bottle
- CVE-2022-31798 Auth bypass in nortekcontrol:emerge e3 firmware
- CVE-2022-31796 Memory corruption in jpeg:libjpeg
- CVE-2022-31795 Command injection in fujitsu:eternus cs8000 firmware
- CVE-2022-31794 Command injection in fujitsu:eternus cs8000 firmware
- CVE-2022-31793 Path traversal in arris:bgw210 firmware
- CVE-2022-31792 Cross-site scripting in watchguard:fireware
- CVE-2022-31791 Privilege escalation in watchguard:fireware
- CVE-2022-31790 Information disclosure in watchguard:fireware
- CVE-2022-3179 Weak Password Requirements in ikus060/rdiffweb
- CVE-2022-31789 Integer overflow in watchguard:fireware
- CVE-2022-31788 SQL injection in ideaco:idealms
- CVE-2022-31787 SQL injection in ideaco:ideatms
- CVE-2022-31786 Cross-site scripting in ideaco:idealms
- CVE-2022-31784 Memory corruption in mitel:mivoice business
- CVE-2022-31783 Memory corruption in fedoraproject:fedora
- CVE-2022-31782 Memory corruption in freedesktop:freetype demo programs
- CVE-2022-31781 Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)
- CVE-2022-31780 HTTP/2 framing vulnerabilities
- CVE-2022-3178 Buffer Over-read in gpac/gpac
- CVE-2022-31779 Improper HTTP/2 scheme and method validation
- CVE-2022-31778 Transfer-Encoding not treated as hop-by-hop
- CVE-2022-31777 Apache Spark XSS vulnerability in log viewer UI Javascript
- CVE-2022-31776 Server-side request forgery in DataPower Gateway
- CVE-2022-31775 XML external entity in DataPower Gateway
- CVE-2022-31774 Cross-site scripting in DataPower Gateway
- CVE-2022-31773 Cross-site request forgery in DataPower Gateway
- CVE-2022-31772 IBM MQ denial of service
- CVE-2022-31770 Denial of service in App Connect Enterprise Certified Container
- CVE-2022-31769 Information disclosure in Spectrum Copy Data Management
- CVE-2022-31768 SQL injection in InfoSphere Information Server
- CVE-2022-31767 Command injection in CICS TX Advanced
- CVE-2022-31766 Other in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2022-31765 Missing authorization in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2022-31764 Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC
- CVE-2022-31763 Null dereference in EMUI
- CVE-2022-31762 Privilege escalation in EMUI
- CVE-2022-31761 Misconfiguration in EMUI
- CVE-2022-31760 Security feature bypass in EMUI
- CVE-2022-3176 Use-after-free in io_uring in Linux Kernel
- CVE-2022-31759 Memory corruption in EMUI
- CVE-2022-31758 Race condition in EMUI
- CVE-2022-31757 Other in EMUI
- CVE-2022-31756 Other in EMUI
- CVE-2022-31755 Other in EMUI
- CVE-2022-31754 Other in EMUI
- CVE-2022-31753 Memory corruption in EMUI
- CVE-2022-31752 Missing authorization in EMUI
- CVE-2022-31751 Race condition in EMUI
- CVE-2022-3175 Missing Custom Error Page in ikus060/rdiffweb
- CVE-2022-31749 Authenticated arbitrary file read/write in WatchGuard Fireware OS
- CVE-2022-31748 Memory corruption in Firefox
- CVE-2022-31747 Memory corruption in Firefox
- CVE-2022-31746 Information disclosure in Firefox for iOS
- CVE-2022-31745 Memory corruption in Firefox
- CVE-2022-31744 Security feature bypass in Firefox
- CVE-2022-31743 Cross-site scripting in Firefox
- CVE-2022-31742 Information disclosure in Firefox
- CVE-2022-31741 Memory corruption in Firefox
- CVE-2022-31740 Memory corruption in Firefox
- CVE-2022-3174 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb
- CVE-2022-31739 Path traversal in Firefox
- CVE-2022-31738 Security feature bypass in Firefox
- CVE-2022-31737 Memory corruption in Firefox
- CVE-2022-31736 Information disclosure in Firefox
- CVE-2022-31735 Open redirect in OpenAM (OpenAM Consortium Edition)
- CVE-2022-31734 Cross-site scripting in Cisco Catalyst 2940 Series Switches
- CVE-2022-31733 Security feature bypass in Cloud Foundry Diego and CF Deployment
- CVE-2022-3173 Improper Authentication in snipe/snipe-it