Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 337 of 437.
- CVE-2022-28986 Missing authorization in lmsdoctor:2 factor authentication
- CVE-2022-28985 Cross-site scripting in orangehrm:orangehrm
- CVE-2022-28982 Liferay Portal and Liferay DXP Vulnerable to XSS via Tag Name
- CVE-2022-28981 Liferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs Module
- CVE-2022-28980 Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix
- CVE-2022-2898 Measuresoft ScadaPro Server and Client Link Following
- CVE-2022-28979 Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module
- CVE-2022-28978 Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module
- CVE-2022-28977 Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented
- CVE-2022-28975 Cross-site scripting in infoblox:nios
- CVE-2022-28973 Memory corruption in tenda:ax1806 firmware
- CVE-2022-28972 Memory corruption in tenda:ax1806 firmware
- CVE-2022-28971 Memory corruption in tenda:ax1806 firmware
- CVE-2022-28970 Memory corruption in tenda:ax1806 firmware
- CVE-2022-2897 Measuresoft ScadaPro Server and Client Link Following
- CVE-2022-28969 Memory corruption in tenda:ax1806 firmware
- CVE-2022-28966 Memory corruption in wasm3 project:wasm3
- CVE-2022-28965 Other in avast:premium security
- CVE-2022-28964 Other in avast:premium security
- CVE-2022-28962 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-28961 SQL injection in spip:spip
- CVE-2022-28960 Code injection in spip:spip
- CVE-2022-2896 Measuresoft ScadaPro Server Use After Free
- CVE-2022-28959 Cross-site scripting in spip:spip
- CVE-2022-28956 Auth bypass in dlink:dir-816l firmware
- CVE-2022-28955 Missing authorization in dlink:dir-816l firmware
- CVE-2022-2895 Measuresoft ScadaPro Server Stack-based Buffer Overflow
- CVE-2022-28948 gopkg.in/yaml.v3 Denial of Service
- CVE-2022-28946 Out of bounds memory access in github.com/open-policy-agent/opa
- CVE-2022-28945 Path traversal in webbank:webcube
- CVE-2022-28944 Supply chain in emcosoftware:msi package builder
- CVE-2022-28940 Missing authorization in h3c:magic r100 firmware
- CVE-2022-2894 Measuresoft ScadaPro Server Untrusted Pointer Dereference
- CVE-2022-28937 Integer overflow in fisco-bcos:fisco-bcos
- CVE-2022-28936 Integer overflow in fisco-bcos:fisco-bcos
- CVE-2022-28935 Command injection in totolink:a3000ru firmware
- CVE-2022-28932 Misconfiguration in dlink:dsl-g2452dg firmware
- CVE-2022-28930 SQL injection in erp-pro project:erp-pro
- CVE-2022-2893 Path traversal in Equipment Predictive Maintenance Solution
- CVE-2022-28929 SQL injection in hospital management system project:hospital management system
- CVE-2022-28927 File upload in subconverter project:subconverter
- CVE-2022-28924 Information disclosure in universis:universis-students
- CVE-2022-28923 Open Redirect in Caddy
- CVE-2022-28921 Cross-site request forgery in blogengine:blogengine.net
- CVE-2022-28920 Cross-site scripting in moecraft:tieba-cloud-sign
- CVE-2022-2892 Measuresoft ScadaPro Server Out-of-bounds Write
- CVE-2022-28919 Cross-site scripting in dokuwiki:dokuwiki
- CVE-2022-28918 Path traversal in njtech:greencms
- CVE-2022-28917 Memory corruption in tenda:ax12 firmware
- CVE-2022-28915 Command injection in dlink:dir-816 firmware
- CVE-2022-28913 Command injection in totolink:n600r firmware
- CVE-2022-28912 Command injection in totolink:n600r firmware
- CVE-2022-28911 Command injection in totolink:n600r firmware
- CVE-2022-28910 Command injection in totolink:n600r firmware
- CVE-2022-2891 WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
- CVE-2022-28909 Command injection in totolink:n600r firmware
- CVE-2022-28908 Command injection in totolink:n600r firmware
- CVE-2022-28907 Command injection in totolink:n600r firmware
- CVE-2022-28906 Command injection in totolink:n600r firmware
- CVE-2022-28905 Command injection in totolink:n600r firmware
- CVE-2022-28901 Command injection in dlink:dir-882 firmware
- CVE-2022-2890 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
- CVE-2022-28896 Command injection in dlink:dir-882 firmware
- CVE-2022-28895 Command injection in dlink:dir-882 firmware
- CVE-2022-28893 Use after free in debian:debian linux
- CVE-2022-28892 Cross-site request forgery in mahara:mahara
- CVE-2022-28890 Processing external DTDs
- CVE-2022-2889 Use After Free in vim/vim
- CVE-2022-28889 Clickjacking in the web console
- CVE-2022-28888 Command injection in spryker:cloud commerce
- CVE-2022-28887 Multiple Denial of Service Vulnerability
- CVE-2022-28886 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28885 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28884 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28883 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28882 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28881 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28880 Denial-of-Service (DoS) Vulnerability
- CVE-2022-2888 Insufficient Session Expiration in octoprint/octoprint
- CVE-2022-28879 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28878 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28877 Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products
- CVE-2022-28876 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28875 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28874 Multiple Denial-of-Service (DoS) Vulnerabilities
- CVE-2022-28873 Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
- CVE-2022-28872 Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
- CVE-2022-28871 Denial-of-Service (DoS) Vulnerability
- CVE-2022-28870 Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
- CVE-2022-2887 WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site Scripting
- CVE-2022-28869 Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
- CVE-2022-28868 Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
- CVE-2022-28867 Cross-site scripting in nokia:netact
- CVE-2022-28866 Missing authorization in nokia:airframe bmc web gui r18 firmware
- CVE-2022-28865 Cross-site scripting in nokia:netact
- CVE-2022-28864 Code injection in nokia:netact
- CVE-2022-28863 File upload in nokia:netact
- CVE-2022-28862 SQL injection in archibus:web central
- CVE-2022-28861 Information disclosure in citilog:citilog
- CVE-2022-28860 Auth bypass in citilog:citilog