Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 326 of 437.
- CVE-2022-30326 Cross-site scripting in trendnet:tew-831dr firmware
- CVE-2022-30325 Weak cryptography in trendnet:tew-831dr firmware
- CVE-2022-30324 Privilege escalation in Hashicorp Nomad
- CVE-2022-30323 Denial of service in hashicorp:go-getter
- CVE-2022-30322 Denial of service in hashicorp:go-getter
- CVE-2022-30321 Command injection in hashicorp:go-getter
- CVE-2022-30320 Weak cryptography in honeywell:saia pg5 controls suite
- CVE-2022-3032 Security feature bypass in Thunderbird
- CVE-2022-30319 Auth bypass in honeywell:saia pg5 controls suite
- CVE-2022-30318 Hardcoded credentials in honeywell:controledge plc firmware
- CVE-2022-30317 Missing authorization in honeywell:experion lx firmware
- CVE-2022-30316 Security feature bypass in honeywell:safety manager firmware
- CVE-2022-30315 Security feature bypass in honeywell:safety manager firmware
- CVE-2022-30314 Hardcoded credentials in honeywell:safety manager firmware
- CVE-2022-30313 Missing authorization in honeywell:safety manager firmware
- CVE-2022-30312 Information disclosure in honeywell:trend iq411 firmware
- CVE-2022-30311 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
- CVE-2022-30310 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
- CVE-2022-3031 Auth bypass in GitLab
- CVE-2022-30309 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
- CVE-2022-30308 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
- CVE-2022-30307 Weak cryptography in Fortinet FortiOS
- CVE-2022-30306 Memory corruption in FortiWeb
- CVE-2022-30305 Security feature bypass in FortiDeceptor
- CVE-2022-30304 Cross-site scripting in FortiAnalyzer
- CVE-2022-30303 Command injection in FortiWeb
- CVE-2022-30302 Path traversal in Fortinet FortiDeceptor
- CVE-2022-30301 Path traversal in Fortinet FortiAP-U
- CVE-2022-30300 Path traversal in FortiWeb
- CVE-2022-3030 Missing authorization in GitLab
- CVE-2022-30299 Path traversal in FortiWeb
- CVE-2022-30298 Privilege escalation in Fortinet FortiSOAR
- CVE-2022-30297 Cross-site scripting in Intel(R) EMA software
- CVE-2022-30296 Information disclosure in version
- CVE-2022-30295 Weak cryptography in uclibc-ng project:uclibc-ng
- CVE-2022-30293 Memory corruption in debian:debian linux
- CVE-2022-30292 Memory corruption in fedoraproject:fedora
- CVE-2022-30290 Missing authorization in citeum:opencti
- CVE-2022-3029 Fatal error on incorrect base64 data in RRDP
- CVE-2022-30289 Cross-site scripting in citeum:opencti
- CVE-2022-30288 Denial of service in ohler:agoo
- CVE-2022-30287 Deserialization in debian:debian linux
- CVE-2022-30286 Information disclosure in pyscript:pyscript
- CVE-2022-30285 Weak cryptography in quest:kace systems management appliance
- CVE-2022-30284 Argument injection in python-libnmap
- CVE-2022-30283 Race condition in insyde:kernel
- CVE-2022-30280 Cross-site request forgery in nokia:netact
- CVE-2022-3028 Race condition in Linux kernel
- CVE-2022-30279 Null dereference in stormshield:stormshield network security
- CVE-2022-30278 Cross-site scripting in Black Duck Hub
- CVE-2022-30277 BD Synapsys™ – Insufficient Session Expiration
- CVE-2022-30276 Missing authorization in motorola:ace ip gateway \(4600\) firmware
- CVE-2022-30275 Weak cryptography in motorolasolutions:mdlc
- CVE-2022-30274 Hardcoded credentials in motorola:ace1000 firmware
- CVE-2022-30273 Weak cryptography in motorolasolutions:mdlc
- CVE-2022-30272 Security feature bypass in motorola:ace1000 firmware
- CVE-2022-30271 Hardcoded credentials in motorola:ace1000 firmware
- CVE-2022-30270 Hardcoded credentials in motorola:ace1000 firmware
- CVE-2022-3027 Contec Health CMS8000
- CVE-2022-30269 Security feature bypass in motorola:ace1000 firmware
- CVE-2022-30264 Missing authorization in emerson:dl8000 firmware
- CVE-2022-30262 Security feature bypass in emerson:controlwave micro firmware
- CVE-2022-30260 Security feature bypass in emerson:deltav distributed control system sq controller firmware
- CVE-2022-3026 WP Users Exporter <= 1.4.2 - CSV Injection
- CVE-2022-30258 Other in technitium:dns server
- CVE-2022-30257 Other in technitium:dns server
- CVE-2022-30256 Business logic in maradns:maradns
- CVE-2022-3025 Bitcoin / Altcoin Faucet <= 1.6.0 - Settings Update to Stored XSS via CSRF
- CVE-2022-30245 Missing authorization in honeywell:alerton compass
- CVE-2022-30244 Missing authorization in honeywell:alerton ascent control module firmware
- CVE-2022-30243 Missing authorization in honeywell:alterton visual logic firmware
- CVE-2022-30242 Missing authorization in honeywell:alerton ascent control module firmware
- CVE-2022-30241 Cross-site Scripting in jquery.json-viewer
- CVE-2022-30240 Command injection in insightsoftware:magnitude simba amazon redshift jdbc driver
- CVE-2022-3024 Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS
- CVE-2022-30239 Command injection in insightsoftware:magnitude simba amazon athena jdbc driver
- CVE-2022-30238 Auth bypass in Wiser Smart
- CVE-2022-30237 Weak cryptography in Wiser Smart
- CVE-2022-30236 Security feature bypass in Wiser Smart
- CVE-2022-30235 Auth bypass in Wiser Smart
- CVE-2022-30234 Hardcoded credentials in Wiser Smart
- CVE-2022-30233 Other in Wiser Smart
- CVE-2022-30232 Other in Power Logic ION Setup
- CVE-2022-30231 Information disclosure in SICAM GridEdge (Classic)
- CVE-2022-30230 Missing authorization in SICAM GridEdge (Classic)
- CVE-2022-3023 Use of Externally-Controlled Format String in pingcap/tidb
- CVE-2022-30229 Missing authorization in SICAM GridEdge (Classic)
- CVE-2022-30228 Cross-site request forgery in SICAM GridEdge (Classic)
- CVE-2022-30226 Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2022-30225 Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability
- CVE-2022-30224 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- CVE-2022-30223 Windows Hyper-V Information Disclosure Vulnerability
- CVE-2022-30222 Windows Shell Remote Code Execution Vulnerability
- CVE-2022-30221 Windows Graphics Component Remote Code Execution Vulnerability
- CVE-2022-30220 Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2022-30216 Windows Server Service Tampering Vulnerability
- CVE-2022-30215 Active Directory Federation Services Elevation of Privilege Vulnerability
- CVE-2022-30214 Windows DNS Server Remote Code Execution Vulnerability
- CVE-2022-30213 Windows GDI+ Information Disclosure Vulnerability
- CVE-2022-30212 Windows Connected Devices Platform Service Information Disclosure Vulnerability