Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 329 of 437.
- CVE-2022-29946 NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects
- CVE-2022-29945 Information disclosure in dji:air 2 firmware
- CVE-2022-29944 Security feature bypass in opennetworking:onos
- CVE-2022-29943 XML external entity in talend:administration center
- CVE-2022-29942 Server-side request forgery in talend:administration center
- CVE-2022-29940 Cross-site scripting in librehealth:librehealth ehr
- CVE-2022-29939 Cross-site scripting in librehealth:librehealth ehr
- CVE-2022-29938 SQL injection in librehealth:librehealth ehr
- CVE-2022-29937 Command injection in usu:oracle optimization
- CVE-2022-29936 Deserialization in usu:oracle optimization
- CVE-2022-29935 Information disclosure in usu:oracle optimization
- CVE-2022-29934 Privilege escalation in usu:oracle optimization
- CVE-2022-29933 Improper account password reset in Craft CMS
- CVE-2022-29932 Information disclosure in primeur:spazio
- CVE-2022-29931 Cross-site scripting in raytion:custom security manager
- CVE-2022-29930 Weak cryptography in Ktor
- CVE-2022-2993 bt: host: Wrong key validation check
- CVE-2022-29929 Cross-site scripting in TeamCity
- CVE-2022-29928 Information disclosure in TeamCity
- CVE-2022-29927 Cross-site scripting in TeamCity
- CVE-2022-29925 Memory corruption in V-SFT
- CVE-2022-29923 Cross-site scripting in Quick Restaurant Reservations (WordPress plugin)
- CVE-2022-29922 Denial of service in MicroSCADA Pro SYS600
- CVE-2022-2992 Code injection in GitLab
- CVE-2022-29919 Use after free in Intel(R) VROC software
- CVE-2022-29918 Memory corruption in Firefox
- CVE-2022-29917 Memory corruption in Firefox
- CVE-2022-29916 Information disclosure in Firefox
- CVE-2022-29915 Security feature bypass in Firefox
- CVE-2022-29914 Security feature bypass in Firefox
- CVE-2022-29913 Security feature bypass in Thunderbird
- CVE-2022-29912 Security feature bypass in Firefox
- CVE-2022-29911 Security feature bypass in Firefox
- CVE-2022-29910 Security feature bypass in Firefox
- CVE-2022-2991 Memory corruption in kernel
- CVE-2022-29909 Security feature bypass in Firefox
- CVE-2022-29908 Privilege escalation in fabasoft:fabasoft cloud enterprise client
- CVE-2022-29907 Cross-site scripting in mediawiki:mediawiki
- CVE-2022-29906 Missing authorization in mediawiki:mediawiki
- CVE-2022-29905 Cross-site request forgery in mediawiki:mediawiki
- CVE-2022-29904 SQL injection in mediawiki:mediawiki
- CVE-2022-29903 Cross-site request forgery in mediawiki:mediawiki
- CVE-2022-29901 Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)
- CVE-2022-29900 Information disclosure in AMD Processors
- CVE-2022-2990 Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification
- CVE-2022-29898 Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
- CVE-2022-29897 Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
- CVE-2022-29894 Cross-site Scripting in Strapi
- CVE-2022-29893 Auth bypass in Intel(R) AMT
- CVE-2022-29892 Denial of service in Cybozu Garoon
- CVE-2022-29891 Missing authorization in Cybozu Office
- CVE-2022-29890 Cross-site scripting in Octopus Server
- CVE-2022-2989 Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification
- CVE-2022-29889 Hardcoded credentials in iota All-In-One Security Kit
- CVE-2022-29888 Other in InRouter302
- CVE-2022-29887 Cross-site scripting in Intel(R) Manageability Commander software
- CVE-2022-29886 Integer overflow in Alyac
- CVE-2022-29885 EncryptInterceptor does not provide complete protection on insecure networks
- CVE-2022-29884 Denial of service in CP-8000 MASTER MODULE WITH I/O -25/+70°C
- CVE-2022-29883 Missing authorization in SICAM T
- CVE-2022-29882 Cross-site scripting in SICAM T
- CVE-2022-29881 Missing authorization in SICAM T
- CVE-2022-29880 Cross-site scripting in SICAM T
- CVE-2022-2988 Memory corruption in EcoStruxure Machine Expert – HVAC
- CVE-2022-29879 Missing authorization in SICAM T
- CVE-2022-29878 Auth bypass in SICAM T
- CVE-2022-29877 Missing authorization in SICAM P850
- CVE-2022-29876 Cross-site scripting in SICAM T
- CVE-2022-29875 Deserialization in Biograph Horizon PET/CT Systems
- CVE-2022-29874 Weak cryptography in SICAM T
- CVE-2022-29873 Memory corruption in SICAM T
- CVE-2022-29872 Memory corruption in SICAM T
- CVE-2022-29871 Privilege escalation in Intel(R) CSME software installer
- CVE-2022-2987 Ldap WP Login / Active Directory Integration < 3.0.2 - Unauthenticated Settings Update to Auth Bypass
- CVE-2022-29869 Information disclosure in debian:debian linux
- CVE-2022-29868 Security feature bypass in 1password:1password
- CVE-2022-29866 Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core
- CVE-2022-29865 Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core
- CVE-2022-29864 Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core
- CVE-2022-29863 Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
- CVE-2022-29862 Security Update for the OPC UA .NET Standard Stack
- CVE-2022-2986 Moodle Cross-Site Request Forgery (CSRF)
- CVE-2022-29859 Memory corruption in amb1 sdk project:amb1 sdk
- CVE-2022-29858 Unpublished, protected files can be published via shortcode
- CVE-2022-29856 Hardcoded credentials in automationanywhere:automation 360
- CVE-2022-29855 Missing authorization in mitel:6865i sip firmware
- CVE-2022-29854 Missing authorization in mitel:minet firmware
- CVE-2022-29853 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2022-29852 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2022-29851 Command injection in open-xchange:ox app suite
- CVE-2022-29850 Other in lexmark:b2236 firmware
- CVE-2022-2985 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-29849 Privilege escalation in progress:openedge
- CVE-2022-29848 Server-side request forgery in progress:whatsup gold
- CVE-2022-29847 Server-side request forgery in progress:whatsup gold
- CVE-2022-29846 Information disclosure in progress:whatsup gold
- CVE-2022-29845 Path traversal in progress:whatsup gold
- CVE-2022-29844 Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp
- CVE-2022-29843 Western Digital My Cloud OS 5 devices Command Injection Vulnerability
- CVE-2022-29842 Command Injection Vulnerability in Western Digital My Cloud devices