Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 336 of 437.
- CVE-2022-29111 HEVC Video Extensions Remote Code Execution Vulnerability
- CVE-2022-29110 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2022-29109 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2022-29108 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2022-29107 Microsoft Office Security Feature Bypass Vulnerability
- CVE-2022-29106 Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
- CVE-2022-29105 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- CVE-2022-29104 Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2022-29103 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- CVE-2022-29102 Windows Failover Cluster Information Disclosure Vulnerability
- CVE-2022-29098 Weak cryptography in PowerScale OneFS
- CVE-2022-29097 Path traversal in Wyse Management Suite
- CVE-2022-29096 Cross-site scripting in Wyse Management Suite
- CVE-2022-29095 Cross-site scripting in SupportAssist Consumer
- CVE-2022-29094 Path traversal in SupportAssist Client Consumer
- CVE-2022-29093 Path traversal in SupportAssist Client Commercial
- CVE-2022-29092 Privilege escalation in SupportAssist Consumer
- CVE-2022-29091 Cross-site scripting in Unity
- CVE-2022-29090 Information disclosure in Wyse Management Suite
- CVE-2022-2909 SourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted upload
- CVE-2022-29089 Information disclosure in Dell Networking OS10
- CVE-2022-29085 Information disclosure in Unity
- CVE-2022-29084 Auth bypass in Unity
- CVE-2022-29083 Auth bypass in CPG BIOS
- CVE-2022-29082 Security feature bypass in NetWorker
- CVE-2022-29081 Path traversal in zohocorp:manageengine access manager plus
- CVE-2022-29080 Command injection in npm-dependency-versions
- CVE-2022-2908 Denial of service in GitLab
- CVE-2022-29078 ejs template injection vulnerability
- CVE-2022-29077 Memory corruption in ripple:rippled
- CVE-2022-29072 Memory corruption in 7-zip:7-zip
- CVE-2022-29071 Information disclosure in CloudVision Portal
- CVE-2022-2907 Information disclosure in GitLab
- CVE-2022-29063 Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz
- CVE-2022-29062 Path traversal in Fortinet FortiSOAR
- CVE-2022-29061 Command injection in Fortinet FortiSOAR
- CVE-2022-29060 Hardcoded credentials in Fortinet FortiDDoS
- CVE-2022-2906 Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)
- CVE-2022-29059 SQL injection in FortiWeb
- CVE-2022-29058 Command injection in Fortinet FortiAP, FortiAP-S, FortiAP-W2, FortiAP-U
- CVE-2022-29057 Cross-site scripting in Fortinet FortiEDR
- CVE-2022-29056 Denial of service in FortiMail
- CVE-2022-29055 Null dereference in Fortinet FortiOS, FortiProxy
- CVE-2022-29054 Weak cryptography in FortiOS
- CVE-2022-29053 Weak cryptography in Fortinet FortiOS
- CVE-2022-29052 Private key stored in plain text by Jenkins Google Compute Engine Plugin
- CVE-2022-29051 Missing permission checks in Jenkins Publish Over FTP Plugin
- CVE-2022-29050 CSRF vulnerability in Jenkins Publish Over FTP Plugin
- CVE-2022-2905 Memory corruption in kernel
- CVE-2022-29049 Promotion names in Jenkins promoted builds Plugin are not validated when using Job DSL
- CVE-2022-29048 CSRF vulnerability in Jenkins Subversion Plugin
- CVE-2022-29047 Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
- CVE-2022-29046 Stored Cross-site Scripting vulnerability in Jenkins Subversion Plugin
- CVE-2022-29045 Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds Plugin
- CVE-2022-29044 Stored Cross-site Scripting in Jenkins Node and Label parameter Plugin
- CVE-2022-29043 Stored Cross-site Scripting in Jenkins Mask Passwords Plugin
- CVE-2022-29042 Stored Cross-site Scripting vulnerability in Jenkins Job Generator Plugin
- CVE-2022-29041 Stored Cross-site Scripting vulnerability in Jenkins Jira Plugin
- CVE-2022-29040 Stored XSS vulnerability in Jenkins Git Parameter Plugin
- CVE-2022-2904 Cross-site scripting in GitLab
- CVE-2022-29039 Stored Cross-site Scripting vulnerability in Jenkins Gerrit Trigger Plugin
- CVE-2022-29038 Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin
- CVE-2022-29037 Stored XSS in Jenkins CVS Plugin
- CVE-2022-29036 Cross-site Scripting in Jenkins Credentials Plugin
- CVE-2022-29035 Weak cryptography in Ktor
- CVE-2022-29034 Cross-site scripting in SINEMA Remote Connect Server
- CVE-2022-29033 Memory corruption in JT2Go
- CVE-2022-29032 Memory corruption in JT2Go
- CVE-2022-29031 Null dereference in JT2Go
- CVE-2022-29030 Integer overflow in JT2Go
- CVE-2022-2903 NinjaForms < 3.6.13 - Admin+ PHP Objection Injection
- CVE-2022-29029 Null dereference in JT2Go
- CVE-2022-29028 Denial of service in JT2Go
- CVE-2022-29023 Memory corruption in openrazer project:openrazer
- CVE-2022-29022 Memory corruption in openrazer project:openrazer
- CVE-2022-29021 Memory corruption in openrazer project:openrazer
- CVE-2022-29020 Cross-site scripting in forestblog project:forestblog
- CVE-2022-29017 Memory corruption in axiosys:bento4
- CVE-2022-29014 Path traversal in razer:sila firmware
- CVE-2022-29013 Command injection in razer:sila firmware
- CVE-2022-2901 Improper Authorization in chatwoot/chatwoot
- CVE-2022-29009 SQL injection in phpgurukul:cyber cafe management system
- CVE-2022-29008 Missing authorization in phpgurukul:bus pass management system
- CVE-2022-29007 SQL injection in phpgurukul:dairy farm shop management system
- CVE-2022-29006 SQL injection in phpgurukul:directory management system
- CVE-2022-29005 Cross-site scripting in phpgurukul:online birth certificate system
- CVE-2022-29004 Cross-site scripting in phpgurukul:e-diary management system
- CVE-2022-29002 Cross-Site Request Forgery in XXL-Job
- CVE-2022-29001 File upload in springbootmovie project:springbootmovie
- CVE-2022-2900 Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
- CVE-2022-28999 Misconfiguration in bloodshed:dev-c\+\+
- CVE-2022-28998 Memory corruption in xlightftpd:xlight ftp
- CVE-2022-28997 Server-side request forgery in cszcms:cszcms
- CVE-2022-28995 Code injection in yogeshojha:rengine
- CVE-2022-28994 Memory corruption in smallsrv:small http server
- CVE-2022-28993 Missing authorization in bdtask:multi store inventory management system
- CVE-2022-28992 Cross-site request forgery in phpgurukul:online banquet booking system
- CVE-2022-28991 Information disclosure in bdtask:multi store inventory management system
- CVE-2022-28990 Buffer overflow in wasm3
- CVE-2022-28987 Information disclosure in zohocorp:manageengine adselfservice plus