Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 317 of 437.
- CVE-2022-31372 Path traversal in wiris:mathtype
- CVE-2022-3137 TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload
- CVE-2022-31367 Strapi mishandles hidden attributes within admin API responses
- CVE-2022-31366 File upload in eve-ng:eve-ng
- CVE-2022-31364 Memory corruption in infineon:cypress bluetooth mesh software development kit
- CVE-2022-31363 Memory corruption in infineon:cypress bluetooth mesh software development kit
- CVE-2022-31362 File upload in docebo:docebo
- CVE-2022-31361 SQL injection in docebo:docebo
- CVE-2022-3136 Social Rocket < 1.3.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-31358 Cross-site scripting in proxmox:virtual environment
- CVE-2022-31357 SQL injection in online ordering system project:online ordering system
- CVE-2022-31356 SQL injection in online ordering system project:online ordering system
- CVE-2022-31355 SQL injection in online ordering system project:online ordering system
- CVE-2022-31354 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31353 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31352 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31351 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31350 SQL injection in oretnom23:online car wash booking system
- CVE-2022-3135 SEO Smart Links <= 3.0.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-31348 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31347 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31346 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31345 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31344 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31343 SQL injection in oretnom23:online car wash booking system
- CVE-2022-31342 Path traversal in oretnom23:online car wash booking system
- CVE-2022-31340 SQL injection in argie:simple inventory system
- CVE-2022-3134 Use After Free in vim/vim
- CVE-2022-31339 SQL injection in argie:simple inventory system
- CVE-2022-31338 SQL injection in online ordering system project:online ordering system
- CVE-2022-31337 SQL injection in online ordering system project:online ordering system
- CVE-2022-31336 SQL injection in online ordering system project:online ordering system
- CVE-2022-31335 SQL injection in online ordering system project:online ordering system
- CVE-2022-3133 OS Command Injection in jgraph/drawio
- CVE-2022-31329 SQL injection in online ordering system project:online ordering system
- CVE-2022-31328 SQL injection in online ordering system project:online ordering system
- CVE-2022-31327 SQL injection in online ordering system project:online ordering system
- CVE-2022-31325 SQL injection in churchcrm:churchcrm
- CVE-2022-31324 Path traversal in pentasecurity:wapples
- CVE-2022-31322 Privilege escalation in pentasecurity:wapples
- CVE-2022-31321 Path traversal in boltcms:bolt
- CVE-2022-3132 Goolytics - Simple Google Analytics < 1.1.2 - Admin+ Stored Cross-Site Scripting
- CVE-2022-31313 Backdoor in api-res-py
- CVE-2022-31311 Command injection in wavlink:aerial x 1200m firmware
- CVE-2022-3131 Search Logger <= 0.9 - Admin+ SQLi
- CVE-2022-31309 Information disclosure in wavlink:aerial x 1200m firmware
- CVE-2022-31308 Information disclosure in wavlink:aerial x 1200m firmware
- CVE-2022-31307 Use after free in f5:njs
- CVE-2022-31306 Use after free in f5:njs
- CVE-2022-31303 Cross-site scripting in maccms:maccms
- CVE-2022-31302 Cross-site scripting in maccms:maccms
- CVE-2022-31301 Cross-site scripting in angtech:haraj
- CVE-2022-31300 Cross-site scripting in angtech:haraj
- CVE-2022-3130 codeprojects Online Driving School login.php sql injection
- CVE-2022-31299 Cross-site scripting in angtech:haraj
- CVE-2022-31298 Cross-site scripting in angtech:haraj
- CVE-2022-31296 SQL injection in online discussion forum project:online discussion forum
- CVE-2022-31295 Missing authorization in razormist:online discussion forum site
- CVE-2022-31294 Cross-site request forgery in razormist:online discussion forum site
- CVE-2022-31291 Memory corruption in debian:debian linux
- CVE-2022-31290 Known v1.3.1 Cross-site Scripting
- CVE-2022-3129 codeprojects Online Driving School registration.php unrestricted upload
- CVE-2022-31287 Denial of service in axiosys:bento4
- CVE-2022-31285 Denial of service in axiosys:bento4
- CVE-2022-31282 Memory corruption in axiosys:bento4
- CVE-2022-3128 Donation Thermometer < 2.1.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-31277 Auth bypass in mi:xiaomi lamp 1 firmware
- CVE-2022-31273 Auth bypass in 17ido:topidp3000 topsec operating system
- CVE-2022-3127 Cross-site Scripting (XSS) - Stored in jgraph/drawio
- CVE-2022-31269 Hardcoded credentials in nortekcontrol:emerge e3 firmware
- CVE-2022-31268 Path traversal in Gitblit
- CVE-2022-31267 Unescaped control characters in Gitblit
- CVE-2022-31266 Auth bypass in ilias:ilias
- CVE-2022-31265 Code injection in wargaming:world of warships
- CVE-2022-31264 Integer overflow in solana_rbpf
- CVE-2022-31263 Security feature bypass in joinmastodon:mastodon
- CVE-2022-31262 Privilege escalation in gog:galaxy
- CVE-2022-31261 XML external entity in morpheusdata:morpheus
- CVE-2022-31260 Missing authorization in montala:resourcespace
- CVE-2022-3126 Frontend File Manager < 21.4 - File Upload via CSRF
- CVE-2022-31259 Access control bypass in beego
- CVE-2022-31258 Privilege escalation in checkmk:checkmk
- CVE-2022-31257 Security feature bypass in Mendix Applications using Mendix 7
- CVE-2022-31256 sendmail: mail to root privilege escalation via sm-client.pre script
- CVE-2022-31255 SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction
- CVE-2022-31254 rmt-server-pubcloud allows to escalate from user _rmt to root
- CVE-2022-31253 openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself
- CVE-2022-31252 permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
- CVE-2022-31251 slurm: %post for slurm-testsuite operates as root in user owned directory
- CVE-2022-31250 keylime %post scriplet allows for privilege escalation from keylime user to root
- CVE-2022-3125 Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload
- CVE-2022-31249 [RANCHER] OS command injection in Rancher and Fleet
- CVE-2022-31248 SUMA user enumeration via weak error message
- CVE-2022-31247 Rancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)
- CVE-2022-31246 Other in electrum:electrum
- CVE-2022-31245 Command injection in mailcow:mailcow\
- CVE-2022-31244 Privilege escalation in nokia:one-network directory server
- CVE-2022-31243 Race condition in insyde:kernel
- CVE-2022-3124 Frontend File Manager < 21.3 - Unauthenticated File Renaming
- CVE-2022-31239 Information disclosure in PowerScale OneFS