Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 318 of 437.
- CVE-2022-31238 Information disclosure in PowerScale OneFS
- CVE-2022-31237 Information disclosure in PowerScale OneFS
- CVE-2022-31234 Auth bypass in PowerStore
- CVE-2022-31233 Privilege escalation in Unisphere for PowerMax
- CVE-2022-31232 Command injection in Smart Fabric Storage Software
- CVE-2022-31231 Missing authorization in ECS
- CVE-2022-31230 Weak cryptography in PowerScale OneFS
- CVE-2022-3123 Cross-site Scripting (XSS) - Reflected in splitbrain/dokuwiki
- CVE-2022-31229 Information disclosure in PowerScale OneFS
- CVE-2022-31228 Auth bypass in XtremIO
- CVE-2022-31226 Memory corruption in CPG BIOS
- CVE-2022-31225 Other in CPG BIOS
- CVE-2022-31224 Security feature bypass in CPG BIOS
- CVE-2022-31223 Information disclosure in CPG BIOS
- CVE-2022-31222 Denial of service in CPG BIOS
- CVE-2022-31221 Information disclosure in CPG BIOS
- CVE-2022-31220 Other in CPG BIOS
- CVE-2022-3122 SourceCodester Clinics Patient Management System medicine_details.php sql injection
- CVE-2022-31219 Drive Composer Link Following Local Privilege Escalation Vulnerability
- CVE-2022-31218 Drive Composer Link Following Local Privilege Escalation Vulnerability
- CVE-2022-31217 Drive Composer Link Following Local Privilege Escalation Vulnerability
- CVE-2022-31216 Drive Composer Link Following Local Privilege Escalation Vulnerability
- CVE-2022-31215 Security feature bypass in goverlan:client agent
- CVE-2022-31214 Privilege escalation in debian:debian linux
- CVE-2022-31213 Null dereference in dbus-broker project:dbus-broker
- CVE-2022-31212 Memory corruption in dbus-broker project:dbus-broker
- CVE-2022-31211 Hardcoded credentials in infiray:iray-a8z3 firmware
- CVE-2022-31210 Hardcoded credentials in infiray:iray-a8z3 firmware
- CVE-2022-3121 SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgery
- CVE-2022-31209 Memory corruption in infiray:iray-a8z3 firmware
- CVE-2022-31208 Command injection in infiray:iray-a8z3 firmware
- CVE-2022-31207 Security feature bypass in omron:cp1w-cif41 firmware
- CVE-2022-31206 Security feature bypass in omron:nj101-1000 firmware
- CVE-2022-31205 Information disclosure in omron:cp1w-cif41 firmware
- CVE-2022-31204 Information disclosure in omron:cp1w-cif41 firmware
- CVE-2022-31202 Path traversal in monitoringsoft:softguard web
- CVE-2022-31201 Cross-site scripting in monitoringsoft:softguard web
- CVE-2022-31200 Cross-site scripting in atmail:atmail
- CVE-2022-3120 SourceCodester Clinics Patient Management System Login index.php sql injection
- CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization
- CVE-2022-31198 GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals in @openzeppelin/contracts
- CVE-2022-31197 SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc
- CVE-2022-31196 Server-Side Request Forgery (SSRF) vulnerability in Databasir
- CVE-2022-31195 Path traversal vulnerability in Simple Archive Format package import in DSpace
- CVE-2022-31194 Path traversal vulnerabilities in DSpace JSPUI submission upload
- CVE-2022-31193 URL Redirection to Untrusted Site in Dspace JSPUI
- CVE-2022-31192 Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature
- CVE-2022-31191 Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools
- CVE-2022-31190 Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI
- CVE-2022-3119 OAuth client Single Sign On for WordPress < 3.0.4 - Unauthenticated Settings Update to Authentication Bypass
- CVE-2022-31189 "Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization
- CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)
- CVE-2022-31187 Stored Cross Site Scripting (XSS) through global search in GLPI
- CVE-2022-31186 Leakage of excessive information into log in next-auth
- CVE-2022-31185 Email addresses are not hidden regardless of selected state in mprweb
- CVE-2022-31184 Email activation route can be abused by spammers in Discourse
- CVE-2022-31183 mTLS client verification is skipped in fs2 on Node.js
- CVE-2022-31182 Cache poisoning via maliciously-formed request in Discourse
- CVE-2022-31181 Remote code execution in prestashop
- CVE-2022-31180 Insufficient escaping of whitespace in shescape
- CVE-2022-3118 Sourcecodehero ERP System Project processlogin.php sql injection
- CVE-2022-31179 Insufficient escaping of line feeds for CMD in shescape
- CVE-2022-31178 Improper Authorization in eLabFTW
- CVE-2022-31177 Possible to infer sensitive information through query strings in Flask-AppBuilder
- CVE-2022-31176 Grafana Image Renderer leaking files
- CVE-2022-31175 Cross-site scripting caused by the editor instance destroying process in ckeditor5
- CVE-2022-31173 Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow
- CVE-2022-31172 OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
- CVE-2022-31170 OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
- CVE-2022-31169 Cranelift vulnerable to miscompilation of constant values in division on AArch64
- CVE-2022-31168 Zulip Server insufficient authorization for changing bot roles
- CVE-2022-31167 XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference
- CVE-2022-31166 XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups
- CVE-2022-31164 Tovy before v0.7.51 vulnerable to users logging in as and impersonating other users
- CVE-2022-31163 TZInfo relative path traversal vulnerability allows loading of arbitrary files
- CVE-2022-31162 Slack Morphism for Rust before 0.41.0 can accidentally leak Slack OAuth client information in application debug logs
- CVE-2022-31161 Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload
- CVE-2022-31160 jQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label
- CVE-2022-3116 Null dereference in Heimdal Software Kerberos
- CVE-2022-31159 Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
- CVE-2022-31158 Authentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-library
- CVE-2022-31157 Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library
- CVE-2022-31156 Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed
- CVE-2022-31155 Unauthorized overwriting of saved searches in Sourcegraph
- CVE-2022-31154 Indirect Object Access in Sourcegraph Code Monitoring
- CVE-2022-31153 OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
- CVE-2022-31152 Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules
- CVE-2022-31151 Uncleared cookies on cross-host/cross-origin redirect in undici
- CVE-2022-31150 CRLF injection in request headers
- CVE-2022-3115 Null dereference in Kernel
- CVE-2022-31149 ActivityWatch vulnerable to DNS rebinding attack
- CVE-2022-31148 Persistent cross site scripting in customer module in Shopware
- CVE-2022-31147 jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306
- CVE-2022-31146 Use After Free in Wasmtime
- CVE-2022-31145 Insufficient AccessToken Expiration Check in FlyteAdmin
- CVE-2022-31144 Potential heap overflow in Redis
- CVE-2022-31143 Leak of sensitive information through login page error in GLPI
- CVE-2022-31142 Potential Timing Attack Vector in @fastify/bearer-auth
- CVE-2022-31140 Valinor error messages leading to potential data exfiltration
- CVE-2022-3114 Null dereference in Kernel