Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 333 of 437.
- CVE-2022-2947 Memory corruption in HyperView Player
- CVE-2022-29468 Cross-site request forgery in AVideo
- CVE-2022-29467 Information disclosure in Cybozu Garoon
- CVE-2022-29466 Denial of service in Intel(R) SPS
- CVE-2022-29465 Memory corruption in ImageGear
- CVE-2022-29464 WSO2 Multiple Products Unrestrictive Upload of File
- CVE-2022-2946 Use After Free in vim/vim
- CVE-2022-29458 Memory corruption in apple:macos
- CVE-2022-29457 Information disclosure in zohocorp:manageengine adaudit plus
- CVE-2022-29455 WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29454 WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-29453 WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update
- CVE-2022-29452 WordPress Export All URLs plugin <= 4.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29451 Cross-site request forgery in Rara One Click Demo Import (WordPress plugin)
- CVE-2022-29450 WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-2945 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal
- CVE-2022-29449 WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29448 WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerability
- CVE-2022-29447 WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability
- CVE-2022-29446 WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability
- CVE-2022-29445 WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability
- CVE-2022-29444 WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29443 WordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-29442 Private Messages For WordPress <= 2.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29441 Cross-site request forgery in Private Messages For WordPress (WordPress plugin)
- CVE-2022-29440 WordPress Promotion Slider plugin <= 3.3.4 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-29439 Cross-site request forgery in Image Slider by NextCode – Photo & Video SLider (WordPress plugin)
- CVE-2022-29438 WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29437 WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-29436 Cross-site request forgery in Code Snippets Extended (WordPress plugin)
- CVE-2022-29435 WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-29434 WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability
- CVE-2022-29433 Cross-site scripting in Donations (WordPress plugin)
- CVE-2022-29432 WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-29431 Remove CPT base <= 5.8 - CSRF leads to CPT base deletion
- CVE-2022-29430 Cross-site request forgery in PNG to JPG (WordPress plugin)
- CVE-2022-2943 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read
- CVE-2022-29429 Cross-site request forgery in Code Snippets Extended (WordPress plugin)
- CVE-2022-29428 WordPress WP Slider Plugin <= 1.4.5 - Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29427 WordPress Disable Right Click For WP plugin <= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-29426 Cross-site scripting in Slideshow, Image Slider by 2J (WordPress plugin)
- CVE-2022-29425 WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29424 Cross-site scripting in Image Hover Effects Ultimate (WordPress plugin)
- CVE-2022-29423 WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability
- CVE-2022-29422 Cross-site scripting in Countdown & Clock (WordPress plugin)
- CVE-2022-29421 WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29420 WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29419 WordPress 3xSocializer plugin <= 0.98.22 - Authenticated SQL Injection (SQLi) vulnerability
- CVE-2022-29418 WordPress Night Mode plugin <= 1.0.0 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29417 WordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability
- CVE-2022-29416 WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-29415 WordPress Ravpage plugin <= 2.16 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2022-29414 WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-29413 Cross-site request forgery in Hermit 音乐播放器 (WordPress plugin)
- CVE-2022-29412 WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- CVE-2022-29411 WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Unauthenticated SQL Injection SQLi) vulnerability
- CVE-2022-29410 WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Authenticated SQL Injection (SQLi) vulnerability
- CVE-2022-2941 WP-UserOnline <= 2.88.0 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2022-29408 Cross-site scripting in Advanced Contact form 7 DB (WordPress plugin)
- CVE-2022-29406 WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-29405 Apache Archiva Arbitrary user password reset vulnerability
- CVE-2022-29404 Denial of service in mod_lua r:parsebody
- CVE-2022-29402 Auth bypass in tp-link:tl-wr840n firmware
- CVE-2022-29399 Memory corruption in totolink:n600r firmware
- CVE-2022-29398 Memory corruption in totolink:n600r firmware
- CVE-2022-29397 Memory corruption in totolink:n600r firmware
- CVE-2022-29396 Memory corruption in totolink:n600r firmware
- CVE-2022-29395 Memory corruption in totolink:n600r firmware
- CVE-2022-29394 Memory corruption in totolink:n600r firmware
- CVE-2022-29393 Memory corruption in totolink:n600r firmware
- CVE-2022-29392 Memory corruption in totolink:n600r firmware
- CVE-2022-29391 Memory corruption in totolink:n600r firmware
- CVE-2022-2939 WP Cerber Security <= 9.0 - User Enumeration Bypass
- CVE-2022-29383 SQL injection in netgear:ssl312 firmware
- CVE-2022-29380 Cross-site scripting in creativeitem:academy lms
- CVE-2022-2938 Use after free in kernel
- CVE-2022-29379 Memory corruption in f5:njs
- CVE-2022-29377 Memory corruption in totolink:a3600r firmware
- CVE-2022-29376 Misconfiguration in apachefriends:xampp
- CVE-2022-2937 Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description
- CVE-2022-29369 Memory corruption in f5:njs
- CVE-2022-29368 Memory corruption in moddable:moddable
- CVE-2022-29363 Deserialization in phpok:phpok
- CVE-2022-29362 Cross-site Scripting in ZKEACMS
- CVE-2022-29361 Other in palletsprojects:werkzeug
- CVE-2022-29360 Cross-site scripting in rainloop:webmail
- CVE-2022-2936 Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link
- CVE-2022-29359 Cross-site scripting in school club application system project:school club application system
- CVE-2022-29358 Integer overflow in epub2txt2 project:epub2txt2
- CVE-2022-29354 File upload in keystonejs:keystone
- CVE-2022-29353 File upload in graphql-upload project:graphql-upload
- CVE-2022-29351 File upload in tiddlywiki:tiddlywiki5
- CVE-2022-2935 Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL
- CVE-2022-29349 Cross-site scripting in keking:kkfileview
- CVE-2022-29347 File upload in web\@rchiv project:web\@rchiv
- CVE-2022-29340 Null dereference in gpac:gpac
- CVE-2022-2934 Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Image URL
- CVE-2022-29339 Denial of service in gpac:gpac
- CVE-2022-29337 Command injection in cdatatec:fd702xw-x-r430 firmware
- CVE-2022-29334 Auth bypass in h project:h