Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 332 of 437.
- CVE-2022-29586 Security feature bypass in konicaminolta:bizhub 226i firmware
- CVE-2022-29585 Information disclosure in mahara:mahara
- CVE-2022-29584 Cross-site scripting in mahara:mahara
- CVE-2022-29583 Privilege escalation in service project:service
- CVE-2022-29582 Use after free in debian:debian linux
- CVE-2022-29581 Privilege escalation in Kernel
- CVE-2022-29580 Path Traversal in Android Google Search App
- CVE-2022-2958 BadgeOS < 3.7.1.3 - Subscriber+ SQLi
- CVE-2022-29578 Auth bypass in meridian:meridian
- CVE-2022-29577 Cross-site Scripting in OWASP AntiSamy
- CVE-2022-2957 SourceCodester Simple and Nice Shopping Cart Script profile.php sql injection
- CVE-2022-29567 Possible information disclosure inside TreeGrid component with default data provider
- CVE-2022-29566 Weak cryptography in bulletproofs project:bulletproofs
- CVE-2022-29564 Missing authorization in jamf:private access
- CVE-2022-29562 Denial of service in RUGGEDCOM ROX MX5000
- CVE-2022-29561 Cross-site request forgery in RUGGEDCOM ROX MX5000
- CVE-2022-29560 Command injection in RUGGEDCOM ROX MX5000
- CVE-2022-2956 ConsoleTVs Noxen users.php cross site scripting
- CVE-2022-29558 Command injection in realtek:rtl819x software development kit
- CVE-2022-29557 Cross-site request forgery in relx:firco compliance link
- CVE-2022-29556 Server-side request forgery in northern.tech:mender
- CVE-2022-29555 Cross-site request forgery in northern.tech:mender
- CVE-2022-29550 Information disclosure in qualys:cloud agent
- CVE-2022-29549 Privilege escalation in qualys:cloud agent for linux
- CVE-2022-29548 Cross-site scripting in wso2:api manager
- CVE-2022-29547 Missing authorization in mediawiki:createredirect
- CVE-2022-29546 OutOfMemory Exception by specifically crafted processing instruction in NekoHtml Parser
- CVE-2022-29540 Cross-site scripting in resi:gemini-net
- CVE-2022-29539 Command injection in resi:gemini-net
- CVE-2022-29538 Missing authorization in resi:gemini-net
- CVE-2022-29537 Memory corruption in gpac:gpac
- CVE-2022-29536 Memory corruption in debian:debian linux
- CVE-2022-29535 SQL injection in zohocorp:manageengine opmanager
- CVE-2022-29534 Auth bypass in misp-project:misp
- CVE-2022-29533 Cross-site scripting in misp-project:misp
- CVE-2022-29532 Cross-site scripting in misp-project:misp
- CVE-2022-29531 Cross-site scripting in misp-project:misp
- CVE-2022-29530 Cross-site scripting in misp-project:misp
- CVE-2022-2953 Memory corruption in libtiff
- CVE-2022-29529 Cross-site scripting in misp-project:misp
- CVE-2022-29528 Deserialization in misp-project:misp
- CVE-2022-29527 Race condition in amazon:amazon ssm agent
- CVE-2022-29526 golang.org/x/sys/unix has Incorrect privilege reporting in syscall
- CVE-2022-29525 Hardcoded credentials in Rakuten Casa
- CVE-2022-29524 Memory corruption in V-Server and V-Server Lite
- CVE-2022-29523 Denial of service in Open CAS software maintained by Intel(R)
- CVE-2022-29522 Use after free in V-SFT
- CVE-2022-29520 Command injection in iota All-In-One Security Kit
- CVE-2022-2952 GE CIMPLICITY Access of Uninitialized Pointer
- CVE-2022-29519 Information disclosure in STARDOM Controller
- CVE-2022-29518 Auth bypass in Screen Creator Advance2, HMI GC-A2 series, and Real time remote monitoring and control tool
- CVE-2022-29517 Path traversal in lansweeper
- CVE-2022-29516 Command injection in IPCOM EX2 series, IPCOM EX series, IPCOM VE2 series, and IPCOM VA2/VE1 series
- CVE-2022-29515 Denial of service in Intel(R) SPS
- CVE-2022-29514 Missing authorization in Intel(R) SUR software
- CVE-2022-29513 Cross-site scripting in Cybozu Garoon
- CVE-2022-29512 Information disclosure in Cybozu Garoon
- CVE-2022-29511 Path traversal in lansweeper
- CVE-2022-29510 Memory corruption in Intel(R) Server Board M10JNP2SB BIOS firmware
- CVE-2022-2951 Memory corruption in HyperView Player
- CVE-2022-29509 Path traversal in T&D Data Server and THERMO RECORDER DATA SERVER
- CVE-2022-29508 Null dereference in Intel(R) VROC software
- CVE-2022-29507 Information disclosure in version
- CVE-2022-29506 Memory corruption in V-SFT
- CVE-2022-29505 Privilege escalation in LINE for Windows
- CVE-2022-29503 Memory corruption in Eufy Homebase 2
- CVE-2022-29502 Privilege escalation in fedoraproject:fedora
- CVE-2022-29501 Privilege escalation in debian:debian linux
- CVE-2022-29500 Information disclosure in debian:debian linux
- CVE-2022-2950 Memory corruption in HyperView Player
- CVE-2022-29499 Mitel MiVoice Connect Data Validation
- CVE-2022-29498 SQL injection in blazer
- CVE-2022-29496 Memory corruption in Blynk-Library
- CVE-2022-29495 WordPress Popup Builder plugin <= 4.1.11 - Cross-Site Request Forgery (CSRF) leading to plugin settings update
- CVE-2022-29494 Denial of service in OpenBMC
- CVE-2022-29493 Denial of service in Integrated BMC
- CVE-2022-29492 Denial of service in MicroSCADA Pro SYS600
- CVE-2022-29491 Null dereference in BIG-IP LTM, Advanced WAF, ASM, and APM
- CVE-2022-29490 Missing authorization in MicroSCADA X SYS600
- CVE-2022-2949 Memory corruption in HyperView Player
- CVE-2022-29489 WordPress Sucuri Security plugin <= 1.8.33 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-29488 Horner Automation Cscape Csfont
- CVE-2022-29487 Cross-site scripting in Cybozu Office
- CVE-2022-29486 Memory corruption in Hyperscan library maintained by Intel(R)
- CVE-2022-29485 Cross-site scripting in SHIRASAGI
- CVE-2022-29484 Missing authorization in Cybozu Garoon
- CVE-2022-29483 e-Design - Multiple vulnerabilities
- CVE-2022-29482 Weak cryptography in Mobaoku-Auction & Flea Market App for iOS
- CVE-2022-29481 Security feature bypass in InRouter302
- CVE-2022-29480 Denial of service in BIG-IP
- CVE-2022-2948 GE CIMPLICITY Heap-based Buffer Overflow
- CVE-2022-29479 Denial of service in BIG-IP
- CVE-2022-29477 Auth bypass in iota All-In-One Security Kit
- CVE-2022-29476 Cross-site scripting in Notification Bar for WordPress
- CVE-2022-29475 Information disclosure in iota All-In-One Security Kit
- CVE-2022-29474 Path traversal in BIG-IP
- CVE-2022-29473 Denial of service in BIG-IP
- CVE-2022-29472 Command injection in iota All-In-One Security Kit
- CVE-2022-29471 Missing authorization in Cybozu Garoon
- CVE-2022-29470 Privilege escalation in Intel DTT Software