Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 314 of 437.
- CVE-2022-3172 Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)
- CVE-2022-31711 Information disclosure in vRealize Log Insight (vRLI)
- CVE-2022-31710 Deserialization in vRealize Log Insight (vRLI)
- CVE-2022-3171 Memory handling vulnerability in ProtocolBuffers Java core and lite
- CVE-2022-31708 Missing authorization in VMware vRealize Operations (vROps)
- CVE-2022-31707 Privilege escalation in VMware vRealize Operations (vROps)
- CVE-2022-31706 Path traversal in vRealize Log Insight (vRLI)
- CVE-2022-31705 Memory corruption in VMware ESXi, VMware Workstation Pro / Player, VMware Fusion Pro / Fusion (Fusion), VMware Cloud Foundation
- CVE-2022-31704 Missing authorization in vRealize Log Insight (vRLI)
- CVE-2022-31703 Path traversal in vRealize Log Insight (vRLI)
- CVE-2022-31702 Command injection in VMware vRealize Network Insight (vRNI)
- CVE-2022-31701 Auth bypass in VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM)
- CVE-2022-31700 Other in VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM)
- CVE-2022-3170 Memory corruption in kernel
- CVE-2022-31699 Memory corruption in VMware ESXi, VMware Cloud Foundation
- CVE-2022-31698 Denial of service in VMware vCenter Server, VMware Cloud Foundation
- CVE-2022-31697 Information disclosure in VMware vCenter Server, VMware Cloud Foundation
- CVE-2022-31696 Memory corruption in VMware ESXi, VMware Cloud Foundation
- CVE-2022-31694 Other in VMware InstallBuilder
- CVE-2022-31693 Denial of service in vmware:tools
- CVE-2022-31692 Spring Security authorization rules can be bypassed via forward or include dispatcher types
- CVE-2022-31691 Code injection in Spring by VMware
- CVE-2022-31690 spring-security-oauth2-client vulnerable to Privilege Escalation
- CVE-2022-3169 Denial of service in Kernel
- CVE-2022-31689 Auth bypass in VMware Workspace ONE Assist
- CVE-2022-31688 Cross-site scripting in VMware Workspace ONE Assist
- CVE-2022-31687 Missing authorization in VMware Workspace ONE Assist
- CVE-2022-31686 Auth bypass in VMware Workspace ONE Assist
- CVE-2022-31685 Auth bypass in VMware Workspace ONE Assist
- CVE-2022-31684 Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
- CVE-2022-31683 Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution
- CVE-2022-31682 Path traversal in VMware Aria Operations
- CVE-2022-31681 Null dereference in VMware ESXi
- CVE-2022-31680 Deserialization in VMware vCenter Server
- CVE-2022-31679 Spring Data REST can expose hidden entity attributes
- CVE-2022-31678 XML external entity in VMware Cloud Foundation (NSX-V)
- CVE-2022-31677 Pinniped Supervisor Insufficient Session Expiration vulnerability
- CVE-2022-31676 Privilege escalation in VMware Tools
- CVE-2022-31675 Auth bypass in VMware vRealize Operations
- CVE-2022-31674 Information disclosure in VMware vRealize Operations
- CVE-2022-31673 Information disclosure in VMware vRealize Operations
- CVE-2022-31672 Privilege escalation in VMware vRealize Operations
- CVE-2022-31671 Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs
- CVE-2022-31670 Harbor fails to validate the user permissions when updating tag retention policies
- CVE-2022-3167 Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb
- CVE-2022-31669 Harbor fails to validate the user permissions when updating tag immutability policies
- CVE-2022-31668 User permission validation failure and disclosure of P2P preheat execution logs
- CVE-2022-31667 Harbor fails to validate the user permissions when updating a robot account
- CVE-2022-31666 Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies
- CVE-2022-31665 Code injection in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-31664 Privilege escalation in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-31663 Cross-site scripting in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-31662 Path traversal in VMware Workspace ONE Access, Access Connector, Identity Manager, vIDM Connector and vRealize Automation
- CVE-2022-31661 Privilege escalation in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-31660 Privilege escalation in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-3166 MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack
- CVE-2022-31659 SQL injection in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-31658 Code injection in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-31657 Open redirect in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-31656 Auth bypass in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-31655 Cross-site scripting in VMware vRealize Log Insight
- CVE-2022-31654 Cross-site scripting in VMware vRealize Log Insight
- CVE-2022-31651 Denial of service in sound exchange project:sound exchange
- CVE-2022-31650 Denial of service in sound exchange project:sound exchange
- CVE-2022-3165 Integer overflow in QEMU
- CVE-2022-31649 Information disclosure in owncloud:owncloud
- CVE-2022-31648 Cross-site scripting in talend:administration center
- CVE-2022-31647 Path traversal in docker:desktop
- CVE-2022-31646 Other in HP PC BIOS
- CVE-2022-31645 Race condition in HP PC BIOS
- CVE-2022-31644 Other in HP PC BIOS
- CVE-2022-31643 Other in HP PC BIOS
- CVE-2022-31642 Race condition in HP PC BIOS
- CVE-2022-31641 Race condition in HP PC BIOS
- CVE-2022-31640 Race condition in HP PC BIOS
- CVE-2022-31639 Race condition in HP PC BIOS
- CVE-2022-31638 Race condition in HP PC BIOS
- CVE-2022-31637 Race condition in HP PC BIOS
- CVE-2022-31636 Race condition in HP PC BIOS
- CVE-2022-31635 Race condition in HP PC BIOS
- CVE-2022-31631 PDO::quote() may return unquoted string
- CVE-2022-31630 OOB read due to insufficient input validation in imageloadfont()
- CVE-2022-31629 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities
- CVE-2022-31628 phar wrapper can occur dos when using quine gzip file
- CVE-2022-31627 Heap buffer overflow in finfo_buffer
- CVE-2022-31626 mysqlnd/pdo password buffer overflow
- CVE-2022-31625 Freeing unallocated memory in php_pgsql_free_params()
- CVE-2022-31624 Denial of service in mariadb:mariadb
- CVE-2022-31623 Denial of service in mariadb:mariadb
- CVE-2022-31622 Denial of service in mariadb:mariadb
- CVE-2022-31621 Denial of service in mariadb:mariadb
- CVE-2022-31620 Denial of service in libjpeg project:libjpeg
- CVE-2022-3162 Unauthorized read of Custom Resources
- CVE-2022-31619 Hardcoded credentials in Teamcenter V12.4
- CVE-2022-31618 Null dereference in NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- CVE-2022-31617 Memory corruption in NVIDIA Cloud Gaming (guest driver)
- CVE-2022-31616 Memory corruption in NVIDIA Cloud Gaming (guest driver)
- CVE-2022-31615 Null dereference in GeForce, Workstation, Compute
- CVE-2022-31614 Memory corruption in NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- CVE-2022-31613 Null dereference in NVIDIA Cloud Gaming (guest driver)