Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 316 of 437.
- CVE-2022-31520 Path traversal in logstash-management-api project:logstash-management-api
- CVE-2022-3152 Unverified Password Change in phpfusion/phpfusion
- CVE-2022-31519 Path traversal in windmill project:windmill
- CVE-2022-31518 Path traversal in python-recipe-database project:python-recipe-database
- CVE-2022-31517 Path traversal in mercury sample manager project:mercury sample manager
- CVE-2022-31516 Path traversal in harveyzyh python project:harveyzyh python
- CVE-2022-31515 Path traversal in carceresbe project:carceresbe
- CVE-2022-31514 Path traversal in fan platform project:fan platform
- CVE-2022-31513 Path traversal in krypton project:krypton
- CVE-2022-31512 Path traversal in flask-mvc project:flask-mvc
- CVE-2022-31511 Path traversal in equanimity project:equanimity
- CVE-2022-31510 Path traversal in simple-rat project:simple-rat
- CVE-2022-3151 WP Custom Cursors < 3.0.1 - Arbitrary Cursor Deletion via CSRF
- CVE-2022-31509 Path traversal in iedadata:usap-dc web submission and dataset search
- CVE-2022-31508 Path traversal in idayrus:e-voting
- CVE-2022-31507 Ganga allows absolute path traversal
- CVE-2022-31506 SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely
- CVE-2022-31505 Path traversal in mercadoenlineaback project:mercadoenlineaback
- CVE-2022-31504 Path traversal in baiduwenkuspider flaskweb project:baiduwenkuspider flaskweb
- CVE-2022-31503 Path traversal in orchest:orchest
- CVE-2022-31502 Path traversal in wormnest project:wormnest
- CVE-2022-31501 Path traversal in onyxforum project:onyxforum
- CVE-2022-31500 Misconfiguration in knime:knime analytics platform
- CVE-2022-3150 WP Custom Cursors < 3.2 - Admin+ SQLi
- CVE-2022-31499 Command injection in nortekcontrol:emerge e3 firmware
- CVE-2022-31498 Cross-site scripting in librehealth:librehealth ehr
- CVE-2022-31497 Cross-site scripting in librehealth:librehealth ehr
- CVE-2022-31496 Missing authorization in librehealth:librehealth ehr
- CVE-2022-31495 Cross-site scripting in librehealth:librehealth ehr
- CVE-2022-31494 Cross-site scripting in librehealth:librehealth ehr
- CVE-2022-31493 Cross-site scripting in librehealth:librehealth ehr
- CVE-2022-31492 Cross-site scripting in librehealth:librehealth ehr
- CVE-2022-31491 Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote at
- CVE-2022-3149 WP Custom Cursors < 3.0.1 - Stored Cross-Site Scripting via CSRF
- CVE-2022-31489 SQL injection in inoutscripts:blockchain altexchanger
- CVE-2022-31488 SQL injection in inoutscripts:blockchain altexchanger
- CVE-2022-31487 SQL injection in inoutscripts:blockchain altexchanger
- CVE-2022-31486 Command injection via Advanced Networking route add functionality
- CVE-2022-31485 Unauthenticated homepage note modification
- CVE-2022-31484 User Account Deletion Unauthenticated
- CVE-2022-31483 Arbitrary file write via authenticated OSDP file upload
- CVE-2022-31482 Denial-of-Service via internal structure overflow
- CVE-2022-31481 Remote Code Execution via buffer overflow in firmware update process
- CVE-2022-31480 Unauthenticated Firmware Upload and Arbitrary Reboot
- CVE-2022-3148 Cross-site Scripting (XSS) - Generic in jgraph/drawio
- CVE-2022-31479 Remote Code Execution via command injection of the hostname
- CVE-2022-31478 Information disclosure in sr.solutions:usertakeover
- CVE-2022-31477 Information disclosure in Intel(R) NUC BIOS firmware
- CVE-2022-31476 Missing authorization in Intel(R) SUR software
- CVE-2022-31475 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability
- CVE-2022-31474 WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal
- CVE-2022-31473 BIG-IP APM Appliance mode vulnerability CVE-2022-31473
- CVE-2022-31472 Missing authorization in Cybozu Garoon
- CVE-2022-31471 untangle vulnerable to Improper Restriction of XML External Entity Reference
- CVE-2022-31470 Cross-site scripting in axigen:axigen mobile webmail
- CVE-2022-3147 Server-side Denial of Service while processing a specifically crafted JPEG file
- CVE-2022-31469 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2022-31468 Cross-site scripting in open-xchange:ox app suite
- CVE-2022-31467 DLL Hijacking Vulnerability in Quick Heal Total Security
- CVE-2022-31466 TOCTOU Vulnerability in Quick Heal Total Security
- CVE-2022-31465 Privilege escalation in Xpedition Designer VX.2.10
- CVE-2022-31464 Privilege escalation in adaware:protect
- CVE-2022-31463 Auth bypass in owllabs:meeting owl pro firmware
- CVE-2022-31462 Hardcoded credentials in owllabs:meeting owl pro firmware
- CVE-2022-31461 Auth bypass in owllabs:meeting owl pro firmware
- CVE-2022-31460 Hardcoded credentials in owllabs:meeting owl pro firmware
- CVE-2022-3146 tripleo-ansible may disclose important configuration details from an OpenStack deployment
- CVE-2022-31459 Weak cryptography in owllabs:meeting owl pro firmware
- CVE-2022-31458 Other in rtx trap project:rtx trap
- CVE-2022-31457 Path traversal in rtx trap project:rtx trap
- CVE-2022-31456 Cross-site scripting in truedesk:truedesk
- CVE-2022-31455 Cross-site scripting in truedesk:truedesk
- CVE-2022-31454 Cross-site scripting in yiiframework:yii
- CVE-2022-3145 @okta/oidc-middlewareOpen Redirect vulnerability
- CVE-2022-31447 XML external entity in magicpin:magicpin
- CVE-2022-31446 Command injection in tendacn:ac18 firmware
- CVE-2022-3144 Wordfence Security – Firewall & Malware Scan <= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2022-3143 Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator
- CVE-2022-3142 NEX-Forms < 7.9.7 - Authenticated SQLi
- CVE-2022-31415 SQL injection in online fire reporting system project:online fire reporting system
- CVE-2022-31414 Memory corruption in dlink:dir-1960 firmware
- CVE-2022-3141 Translatepress Multilinugal < 2.3.3 - Admin+ SQLi
- CVE-2022-31405 Information disclosure in mv idigital clinic enterprise project:mv idigital clinic enterprise
- CVE-2022-31403 Cross-site scripting in combodo:itop
- CVE-2022-31402 Cross-site scripting in combodo:itop
- CVE-2022-31400 Cross-site scripting in helpdeskz:helpdeskz
- CVE-2022-3140 Macro URL arbitrary script execution
- CVE-2022-31398 Cross-site scripting in helpdeskz:helpdeskz
- CVE-2022-31395 Path traversal in algosolutions:8373 ip zone paging adapter firmware
- CVE-2022-31394 Denial of service in hyper:hyper
- CVE-2022-31393 Server-side request forgery in jizhicms:jizhicms
- CVE-2022-31390 Server-side request forgery in jizhicms:jizhicms
- CVE-2022-3139 We’re Open! < 1.42 - Admin+ Stored Cross-Site Scripting
- CVE-2022-31386 Server-side request forgery in nbnbk project:nbnbk
- CVE-2022-31384 SQL injection in phpgurukul:directory management system
- CVE-2022-31383 SQL injection in phpgurukul:directory management system
- CVE-2022-31382 SQL injection in phpgurukul:directory management system
- CVE-2022-3138 Cross-site Scripting (XSS) - Generic in jgraph/drawio
- CVE-2022-31374 File upload in contec:sv-cpt-mc310 firmware
- CVE-2022-31373 Cross-site scripting in contec:sv-cpt-mc310 firmware