Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 330 of 437.
- CVE-2022-29841 OS Command Injection vulnerability in Western Digital My Cloud devices
- CVE-2022-29840 Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices
- CVE-2022-2984 Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-29839 Remote Backups Application Discloses Stored Credentials
- CVE-2022-29838 Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices
- CVE-2022-29837 Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices
- CVE-2022-29836 Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API
- CVE-2022-29835 WD Discovery's Use of Weak Hashing Algorithm for Code Signing
- CVE-2022-29834 Path traversal in GENESIS64
- CVE-2022-29833 Information disclosure in GX Works3
- CVE-2022-29832 Information disclosure in GX Developer
- CVE-2022-29831 Hardcoded credentials in GX Works3
- CVE-2022-29830 Hardcoded credentials in GX Works3
- CVE-2022-2983 Salat Times < 3.2.2 - Admin+ Stored Cross-Site Scripting
- CVE-2022-29829 Hardcoded credentials in GT Designer3 Version1 (GOT2000)
- CVE-2022-29828 Hardcoded credentials in GX Works3
- CVE-2022-29827 Hardcoded credentials in GX Works3
- CVE-2022-29826 Information disclosure in GX Works3
- CVE-2022-29825 Hardcoded credentials in GT Designer3 Version1 (GOT2000)
- CVE-2022-29824 Integer overflow in debian:debian linux
- CVE-2022-29823 Feathers - Query “__proto__” is converted to real prototype
- CVE-2022-29822 Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
- CVE-2022-29821 Code injection in Rider
- CVE-2022-29820 Misconfiguration in PyCharm
- CVE-2022-2982 Use After Free in vim/vim
- CVE-2022-29819 Code injection in IntelliJ IDEA
- CVE-2022-29818 Security feature bypass in IntelliJ IDEA
- CVE-2022-29817 Cross-site scripting in IntelliJ IDEA
- CVE-2022-29816 Cross-site scripting in IntelliJ IDEA
- CVE-2022-29815 Code injection in IntelliJ IDEA
- CVE-2022-29814 Code injection in IntelliJ IDEA
- CVE-2022-29813 Code injection in IntelliJ IDEA
- CVE-2022-29812 Other in IntelliJ IDEA
- CVE-2022-29811 Cross-site scripting in Hub
- CVE-2022-29810 Insertion of Sensitive Information into Log File in Hashicorp go-getter
- CVE-2022-2981 Download Monitor < 4.5.98 - Admin+ Arbitrary File Download
- CVE-2022-29808 Weak cryptography in quest:kace systems management appliance
- CVE-2022-29807 SQL injection in quest:kace systems management appliance
- CVE-2022-29806 Path traversal in zoneminder:zoneminder
- CVE-2022-29805 Deserialization in fishbowlinventory:fishbowl
- CVE-2022-29804 Path traversal via Clean on Windows in path/filepath
- CVE-2022-29801 XML external entity in Teamcenter V12.4
- CVE-2022-29800 Race condition in networkd-dispatcher
- CVE-2022-2980 NULL Pointer Dereference in vim/vim
- CVE-2022-29799 Path traversal in networkd-dispatcher
- CVE-2022-29798 Denial of service in CV81-WDM FW
- CVE-2022-29797 Memory corruption in CV81-WDM FW
- CVE-2022-29796 Other in EMUI
- CVE-2022-29795 Null dereference in EMUI
- CVE-2022-29794 Use after free in EMUI
- CVE-2022-29793 Misconfiguration in HarmonyOS;EMUI;Magic UI
- CVE-2022-29792 Information disclosure in EMUI
- CVE-2022-29791 Other in EMUI
- CVE-2022-29790 Race condition in EMUI
- CVE-2022-2979 Omron CX-Programmer
- CVE-2022-29789 Other in EMUI
- CVE-2022-29788 Null dereference in libmobi project:libmobi
- CVE-2022-29784 Information disclosure in publiccms:publiccms
- CVE-2022-29780 Memory corruption in nginx:njs
- CVE-2022-2978 Use after free in Kernel
- CVE-2022-29779 Memory corruption in nginx:njs
- CVE-2022-29778 Hardcoded credentials in dlink:dir-890l firmware
- CVE-2022-29777 Memory corruption in onlyoffice:core
- CVE-2022-29776 Memory corruption in onlyoffice:core
- CVE-2022-29775 Auth bypass in ispyconnect:ispy
- CVE-2022-29774 Path traversal in ispyconnect:ispy
- CVE-2022-29773 Access control issue in AlekSIS-Core
- CVE-2022-29770 Cross site scripting in XXL-job
- CVE-2022-2977 Use after free in Linux kernel
- CVE-2022-29767 Denial of service in adbyby project:adbyby
- CVE-2022-29751 SQL injection in simple client management system project:simple client management system
- CVE-2022-29750 SQL injection in simple client management system project:simple client management system
- CVE-2022-2975 Avaya Aura Application Enablement Services weak permissions in web application
- CVE-2022-29749 SQL injection in simple client management system project:simple client management system
- CVE-2022-29748 SQL injection in simple client management system project:simple client management system
- CVE-2022-29747 SQL injection in simple client management system project:simple client management system
- CVE-2022-29746 SQL injection in money transfer management system project:money transfer management system
- CVE-2022-29745 SQL injection in money transfer management system project:money transfer management system
- CVE-2022-29741 SQL injection in money transfer management system project:money transfer management system
- CVE-2022-29739 SQL injection in money transfer management system project:money transfer management system
- CVE-2022-29738 SQL injection in money transfer management system project:money transfer management system
- CVE-2022-29735 Cross-site request forgery in deltacontrols:entelitouch firmware
- CVE-2022-29734 Cross-site scripting in ict:protege gx
- CVE-2022-29733 Information disclosure in deltacontrols:entelitouch firmware
- CVE-2022-29732 Cross-site scripting in deltacontrols:entelitouch firmware
- CVE-2022-29731 Information disclosure in ict:protege gx firmware
- CVE-2022-29730 Hardcoded credentials in usr:usr-g800v2 firmware
- CVE-2022-2973 MZ Automation libIEC61850 NULL Pointer Dereference
- CVE-2022-29729 Weak cryptography in verizon:4g lte network extender firmware
- CVE-2022-29728 Cross-site scripting in surveysparrow:enterprise survey software
- CVE-2022-29727 Cross-site scripting in surveysparrow:enterprise survey software
- CVE-2022-29725 File upload in creatiwity:witycms
- CVE-2022-29721 SQL injection in 74cms:74cmsse
- CVE-2022-29720 Path traversal in 74cms:74cmsse
- CVE-2022-2972 MZ Automation libIEC61850 Stack-Based Buffer Overflow
- CVE-2022-29718 Open redirect in caddy
- CVE-2022-29712 Command injection in librenms
- CVE-2022-29711 Cross site scripting in librenms
- CVE-2022-29710 Cross-site scripting in limesurvey:limesurvey
- CVE-2022-2971 MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')