Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 328 of 437.
- CVE-2022-30078 Command injection in netgear:r6200 firmware
- CVE-2022-30076 Information disclosure in entab:erp
- CVE-2022-30075 Code injection in tp-link:archer ax50 firmware
- CVE-2022-30073 Cross-site scripting in wbce:wbce cms
- CVE-2022-30072 Cross-site scripting in wbce:wbce cms
- CVE-2022-3007 Unauthorized Access Vulnerability in Syska SW100 Smartwatch
- CVE-2022-30067 Memory corruption in gimp:gimp
- CVE-2022-30065 Use after free in busybox:busybox
- CVE-2022-30063 Code injection in ftcms:ftcms
- CVE-2022-30062 Path traversal in ftcms:ftcms
- CVE-2022-30061 Path traversal in ftcms:ftcms
- CVE-2022-30060 Path traversal in ftcms:ftcms
- CVE-2022-30059 Path traversal in shopwind:shopwind
- CVE-2022-30058 Path traversal in shopwind:shopwind
- CVE-2022-30057 Cross-site scripting in shopwind:shopwind
- CVE-2022-30055 Memory corruption in mersenne:prime95
- CVE-2022-30054 SQL injection in covid 19 travel pass management project:covid 19 travel pass management
- CVE-2022-30053 SQL injection in oretnom23:toll tax management system
- CVE-2022-30052 SQL injection in home clean service system project:home clean service system
- CVE-2022-30050 Cross-site scripting in sir:gnuboard
- CVE-2022-3005 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
- CVE-2022-30049 Server-side request forgery in ruifang-tech:rebuild
- CVE-2022-30048 SQL injection in mingsoft:mcms
- CVE-2022-30047 SQL injection in mingsoft:mcms
- CVE-2022-30045 Memory corruption in ezxml project:ezxml
- CVE-2022-30040 Memory corruption in tenda:ax1803 firmware
- CVE-2022-3004 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
- CVE-2022-30037 Code injection in xunruicms:xunruicms
- CVE-2022-30036 Hardcoded credentials in malighting:grandma2 light firmware
- CVE-2022-30034 Flower OAuth authentication bypass
- CVE-2022-30033 Memory corruption in tenda:tx9 pro firmware
- CVE-2022-30028 Race condition in dradisframework:dradis
- CVE-2022-30025 SQL injection in credenceanalytics:ideal - wealth and funds
- CVE-2022-30024 Memory corruption in tp-link:tl-wr841 firmware
- CVE-2022-30023 Command injection in tenda:hg9 firmware
- CVE-2022-3002 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
- CVE-2022-30018 Information disclosure in mobotix:mxcontrolcenter
- CVE-2022-30017 Cross-site scripting in rescue dispatch management system project:rescue dispatch management system
- CVE-2022-30016 Missing authorization in rescue dispatch management system project:rescue dispatch management system
- CVE-2022-30015 Cross-site scripting in simple food website project:simple food website
- CVE-2022-30014 Cross-site request forgery in simple food website project:simple food website
- CVE-2022-30013 Cross-site scripting in totaljs:total.js
- CVE-2022-30012 SQL injection in hospital management system project:hospital management system
- CVE-2022-30011 SQL injection in hospital management system project:hospital management system
- CVE-2022-3001 Vulnerability in Milesight Video Management Systems (VMS)
- CVE-2022-30007 File upload in gxcms project:gxcms
- CVE-2022-30004 SQL injection in online market place site project:online market place site
- CVE-2022-30003 Cross-site scripting in online market place site project:online market place site
- CVE-2022-30002 SQL injection in angeljudesuarez:insurance management system
- CVE-2022-30001 SQL injection in angeljudesuarez:insurance management system
- CVE-2022-30000 SQL injection in angeljudesuarez:insurance management system
- CVE-2022-3000 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
- CVE-2022-29999 SQL injection in angeljudesuarez:insurance management system
- CVE-2022-29998 SQL injection in angeljudesuarez:insurance management system
- CVE-2022-29995 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29994 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29993 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29992 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29990 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29989 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29988 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29987 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29986 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29985 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29984 SQL injection in simple client management system project:simple client management system
- CVE-2022-29983 SQL injection in simple client management system project:simple client management system
- CVE-2022-29982 SQL injection in simple client management system project:simple client management system
- CVE-2022-29981 SQL injection in simple client management system project:simple client management system
- CVE-2022-29980 SQL injection in simple client management system project:simple client management system
- CVE-2022-2998 Use after free in Chrome
- CVE-2022-29979 SQL injection in simple client management system project:simple client management system
- CVE-2022-29978 Denial of service in saitoha:libsixel
- CVE-2022-29977 Denial of service in saitoha:libsixel
- CVE-2022-29976 Cross-site scripting in altn:mdaemon
- CVE-2022-29975 Cross-site scripting in altn:mdaemon
- CVE-2022-29974 AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow.
- CVE-2022-29973 Information disclosure in exfat project:exfat
- CVE-2022-29972 Command injection in insightsoftware:magnitude simba amazon redshift odbc driver
- CVE-2022-29971 Command injection in insightsoftware:magnitude simba amazon athena odbc driver
- CVE-2022-29970 sinatra does not validate expanded path matches
- CVE-2022-2997 Session Fixation in snipe/snipe-it
- CVE-2022-29969 Cross-site scripting in mediawiki:rss for mediawiki
- CVE-2022-29968 Other in fedoraproject:fedora
- CVE-2022-29967 Path traversal in glewlwyd project:glewlwyd
- CVE-2022-29965 Weak cryptography in emerson:deltav distributed control system
- CVE-2022-29964 Hardcoded credentials in emerson:deltav distributed control system sq controller firmware
- CVE-2022-29963 Hardcoded credentials in emerson:deltav distributed control system sq controller firmware
- CVE-2022-29962 Hardcoded credentials in emerson:deltav distributed control system sq controller firmware
- CVE-2022-29960 Hardcoded credentials in emerson:openbsi
- CVE-2022-2996 python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
- CVE-2022-29959 Weak cryptography in emerson:openbsi
- CVE-2022-29958 Security feature bypass in jtekt:nano 10gx tuc-1157 firmware
- CVE-2022-29957 Auth bypass in emerson:deltav distributed control system
- CVE-2022-29953 Hardcoded credentials in bakerhughes:bently nevada 3701\/40 firmware
- CVE-2022-29952 Auth bypass in bakerhughes:bently nevada 3701\/40 firmware
- CVE-2022-29951 Auth bypass in jtekt:nano 10gx tuc-1157 firmware
- CVE-2022-29950 Business logic in experian:hunter
- CVE-2022-2995 CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure
- CVE-2022-29948 Auth bypass in lepin ep-kp001 project:lepinep-kp001 firmware
- CVE-2022-29947 Woodpecker allows cross-site scripting (XSS) via build logs