Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 334 of 437.
- CVE-2022-29333 Privilege escalation in cyberlink:powerdirector
- CVE-2022-29332 Path traversal in dlink:dir-825 firmware
- CVE-2022-29330 Missing authorization in vitalpbx:vitalpbx
- CVE-2022-2933 0mk Shortener <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2022-29329 Memory corruption in dlink:dap-1330 firmware
- CVE-2022-29328 Memory corruption in dlink:dap-1330 firmware
- CVE-2022-29327 Memory corruption in dlink:dir-816 firmware
- CVE-2022-29326 Memory corruption in dlink:dir-816 firmware
- CVE-2022-29325 Memory corruption in dlink:dir-816 firmware
- CVE-2022-29324 Memory corruption in dlink:dir-816 firmware
- CVE-2022-29323 Memory corruption in dlink:dir-816 firmware
- CVE-2022-29322 Memory corruption in dlink:dir-816 firmware
- CVE-2022-29321 Memory corruption in dlink:dir-816 firmware
- CVE-2022-29320 Privilege escalation in minitool:partition wizard
- CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit
- CVE-2022-29318 File upload in car rental management system project:car rental management system
- CVE-2022-29317 SQL injection in simple bus ticket booking system project:simple bus ticket booking system
- CVE-2022-29316 SQL injection in complete online job search system project:complete online job search system
- CVE-2022-29315 Code injection in invicti:acunetix
- CVE-2022-2931 Denial of service in GitLab
- CVE-2022-29309 Server-side request forgery in wangl1989:mysiteforme
- CVE-2022-29307 Code injection in ionizecms:ionize
- CVE-2022-29306 SQL injection in ionizecms:ionize
- CVE-2022-29305 SQL injection in helloxz/imgurl
- CVE-2022-29304 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-29303 SolarView Compact Command Injection
- CVE-2022-29302 Information disclosure in contec:sv-cpt-mc310 firmware
- CVE-2022-2930 Unverified Password Change in octoprint/octoprint
- CVE-2022-29298 Path traversal in contec:sv-cpt-mc310 firmware
- CVE-2022-29296 Cross-site scripting in avantune:genialcloud proj
- CVE-2022-2929 DHCP memory leak
- CVE-2022-29287 Missing authorization in kentico:xperience
- CVE-2022-29286 Denial of service in pexip:pexip infinity
- CVE-2022-29281 Path traversal in notable:notable
- CVE-2022-2928 An option refcount overflow exists in dhcpd
- CVE-2022-29279 Memory corruption in insyde:kernel
- CVE-2022-29278 Memory corruption in insyde:kernel
- CVE-2022-29277 Memory corruption in amd:genoa firmware
- CVE-2022-29276 Memory corruption in insyde:kernel
- CVE-2022-29275 Memory corruption in insyde:kernel
- CVE-2022-29273 Cross-site scripting in netgate:pfsense
- CVE-2022-29272 Open redirect in nagios:nagios xi
- CVE-2022-29271 Missing authorization in nagios:nagios xi
- CVE-2022-29270 Auth bypass in nagios:nagios xi
- CVE-2022-2927 Weak Password Requirements in notrinos/notrinoserp
- CVE-2022-29269 Cross-site scripting in nagios:nagios xi
- CVE-2022-29266 apisix/jwt-auth may leak secrets in error response
- CVE-2022-29265 Improper Restriction of XML External Entity References in Multiple Components
- CVE-2022-29264 Other in coreboot:coreboot
- CVE-2022-29263 Misconfiguration in BIG-IP APM
- CVE-2022-29262 Memory corruption in Intel(R) Server Board BIOS firmware
- CVE-2022-2926 Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal
- CVE-2022-29258 Cross-site Scripting in Filter Stream Converter Application in XWiki Platform
- CVE-2022-29257 Electron's AutoUpdater module fails to validate certain nested components of the bundle
- CVE-2022-29256 Possible vulnerability at 'npm install' time in sharp if an attacker has control over build environment
- CVE-2022-29255 Multiple evaluation of contract address in call in vyper
- CVE-2022-29254 Failed payment recorded has completed in silverstripe/silverstripe-omnipay
- CVE-2022-29253 Path Traversal in XWiki Platform
- CVE-2022-29252 Cross-site Scripting in XWiki Platform Wiki UI Main Wiki
- CVE-2022-29251 Cross-site Scripting in the Flamingo theme manager
- CVE-2022-29250 SQL injection in GLPI
- CVE-2022-2925 Cross-site Scripting (XSS) - Stored in appwrite/appwrite
- CVE-2022-29249 Reversible One-Way Hash and Use of a Broken or Risky Cryptographic Algorithm in io.github.javaezlib.JavaEZ
- CVE-2022-29248 Cross-domain cookie leakage in Guzzle
- CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron
- CVE-2022-29246 Potential buffer overflow in function DFU upload in Azure RTOS USBX
- CVE-2022-29245 Weak private key generation in SSH.NET
- CVE-2022-29244 npm packing does not respect root-level ignore files in workspaces
- CVE-2022-29243 Improper input-size validation on the user new session name in Nextcloud Server
- CVE-2022-29242 Buffer Overflow on creating key transport blob in GOST Engine
- CVE-2022-29241 Known or guessable hidden files may be accessed in Jupyter Server
- CVE-2022-29240 Uninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla
- CVE-2022-2924 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
- CVE-2022-29238 Forced Browsing in Jupyter Notebook
- CVE-2022-29237 Limited Authentication Bypass for Media Files in Opencast
- CVE-2022-29236 Improper access control for pencil annotations in BigBlueButton
- CVE-2022-29235 Limited data exposure for shared external videos in BigBlueButton
- CVE-2022-29234 Grace period for lock settings in public/private chats in BigBlueButton
- CVE-2022-29233 Improper access control for breakout rooms in BigBlue Button
- CVE-2022-29232 Exposure of messages in BigBlueButton public chats
- CVE-2022-29230 Potential cross-site scripting (XSS) vulnerability in Hydrogen
- CVE-2022-2923 NULL Pointer Dereference in vim/vim
- CVE-2022-29229 Missing Cryptographic Step in cassproject
- CVE-2022-29228 Reachable assertion in Envoy
- CVE-2022-29227 Use after free in Envoy
- CVE-2022-29226 Trivial authentication bypass in Envoy
- CVE-2022-29225 Zip bomb vulnerability in Envoy
- CVE-2022-29224 Segmentation fault leading to crash in Envoy
- CVE-2022-29223 Buffer overflow on HUB descriptor in Azure RTOS USBX
- CVE-2022-29222 Improper Certificate Validation in Pion DTLS
- CVE-2022-29221 PHP Code Injection by malicious block or filename in Smarty
- CVE-2022-29220 No verification of commits origin in github-action-merge-dependabot
- CVE-2022-2922 Relative Path Traversal in dnnsoftware/dnn.platform
- CVE-2022-29219 Integer Overflow in Lodestar
- CVE-2022-29218 Unauthorized takeover for new versions of some platform-specific gems
- CVE-2022-29217 Key confusion through non-blocklisted public key formats in PyJWT
- CVE-2022-29216 Code injection in `saved_model_cli` in TensorFlow
- CVE-2022-29215 Argument Injection in RegionProtect
- CVE-2022-29214 URL Redirection to Untrusted Site ('Open Redirect') in next-auth
- CVE-2022-29213 Incomplete validation in signal ops leads to crashes in TensorFlow