Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 341 of 437.
- CVE-2022-28522 Cross-site scripting in zcms project:zcms
- CVE-2022-28521 Path traversal in zcms project:zcms
- CVE-2022-2852 Use after free in Chrome
- CVE-2022-28512 SQL injection in fantastic blog project:fantastic blog
- CVE-2022-28508 MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php
- CVE-2022-28507 Cross-site scripting in bdt-121 project:bdt-121 firmware
- CVE-2022-28506 Memory corruption in fedoraproject:fedora
- CVE-2022-28505 SQL injection in jflyfox:jfinal cms
- CVE-2022-2850 Null dereference in 389-ds-base
- CVE-2022-28497 Command injection in totolink:cp900 firmware
- CVE-2022-28496 Command injection in totolink:cp900 firmware
- CVE-2022-28495 Command injection in totolink:cp900 firmware
- CVE-2022-28494 Command injection in totolink:cp900 firmware
- CVE-2022-28493 Missing authorization in totolink:cp900 firmware
- CVE-2022-28492 Auth bypass in totolink:cp900 firmware
- CVE-2022-28491 Command injection in totolink:cp900 firmware
- CVE-2022-2849 Heap-based Buffer Overflow in vim/vim
- CVE-2022-28488 Memory corruption in libwav project:libwav
- CVE-2022-28487 Denial of service in broadcom:tcpreplay
- CVE-2022-28481 CSV-Safe improperly filters special characters potentially leading to CSV injection
- CVE-2022-28480 Memory corruption in allmediaserver:allmediaserver
- CVE-2022-2848 Memory corruption in KEPServerEX
- CVE-2022-28479 Cross-site scripting in seeddms:seeddms
- CVE-2022-28478 Path traversal in seeddms:seeddms
- CVE-2022-28477 Cross-site scripting in wbce:wbce cms
- CVE-2022-28471 Integer overflow in rockcarry:ffjpeg
- CVE-2022-28470 Code-execution backdoor in marcador
- CVE-2022-2847 SourceCodester Guest Management System front.php sql injection
- CVE-2022-28468 SQL injection in payroll management system project:payroll management system
- CVE-2022-28467 SQL injection in online student admission project:online student admission
- CVE-2022-28464 Cross-site scripting in apifox:apifox
- CVE-2022-28463 Memory corruption in debian:debian linux
- CVE-2022-28462 Path traversal in xxyopen:novel-plus
- CVE-2022-28461 SQL injection in mingyuefusu project:mingyuefusu
- CVE-2022-2846 Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS
- CVE-2022-28454 Cross-site scripting in limbas:limbas
- CVE-2022-28452 SQL injection in redplanetcomputers:laundry management system
- CVE-2022-28451 Path traversal in nopcommerce:nopcommerce
- CVE-2022-28450 Cross-site scripting in nopcommerce:nopcommerce
- CVE-2022-2845 Improper Validation of Specified Quantity in Input in vim/vim
- CVE-2022-28449 Cross-site scripting in nopcommerce:nopcommerce
- CVE-2022-28448 Cross-site scripting in nopcommerce:nopcommerce
- CVE-2022-28445 Path traversal in kitesky:kitecms
- CVE-2022-28444 Path traversal in ucms project:ucms
- CVE-2022-28443 Path traversal in ucms project:ucms
- CVE-2022-28440 File upload in ucms project:ucms
- CVE-2022-2844 MotoPress Timetable and Event Schedule Calendar cross site scripting
- CVE-2022-28439 SQL injection in janobe:baby care system
- CVE-2022-28438 SQL injection in janobe:baby care system
- CVE-2022-28437 SQL injection in janobe:baby care system
- CVE-2022-28436 SQL injection in janobe:baby care system
- CVE-2022-28435 SQL injection in janobe:baby care system
- CVE-2022-28434 SQL injection in janobe:baby care system
- CVE-2022-28433 SQL injection in janobe:baby care system
- CVE-2022-28432 SQL injection in janobe:baby care system
- CVE-2022-28431 SQL injection in janobe:baby care system
- CVE-2022-2843 MotoPress Timetable and Event Schedule Quick Edit admin-ajax.php cross site scripting
- CVE-2022-28429 SQL injection in janobe:baby care system
- CVE-2022-28427 SQL injection in janobe:baby care system
- CVE-2022-28426 SQL injection in janobe:baby care system
- CVE-2022-28425 SQL injection in janobe:baby care system
- CVE-2022-28424 SQL injection in janobe:baby care system
- CVE-2022-28423 SQL injection in janobe:baby care system
- CVE-2022-28422 SQL injection in janobe:baby care system
- CVE-2022-28421 SQL injection in janobe:baby care system
- CVE-2022-28420 SQL injection in janobe:baby care system
- CVE-2022-2842 SourceCodester Gym Management System login.php sql injection
- CVE-2022-28417 SQL injection in home owners collection management system project:home owners collection management system
- CVE-2022-28416 SQL injection in home owners collection management system project:home owners collection management system
- CVE-2022-28415 SQL injection in home owners collection management system project:home owners collection management system
- CVE-2022-28414 SQL injection in home owners collection management system project:home owners collection management system
- CVE-2022-28413 SQL injection in car driving school management system project:car driving school management system
- CVE-2022-28412 SQL injection in car driving school management system project:car driving school management system
- CVE-2022-28411 SQL injection in simple real estate portal system portal:simple real estate portal system
- CVE-2022-28410 SQL injection in simple real estate portal system project:simple real estate portal system
- CVE-2022-2841 CrowdStrike Falcon Uninstallation authorization
- CVE-2022-2840 Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
- CVE-2022-28397 Arbitrary file upload in Ghost
- CVE-2022-28394 Other in Trend Micro Password Manager
- CVE-2022-28391 Command injection in busybox:busybox
- CVE-2022-28390 Memory corruption in debian:debian linux
- CVE-2022-2839 Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS
- CVE-2022-28389 Memory corruption in debian:debian linux
- CVE-2022-28388 Memory corruption in debian:debian linux
- CVE-2022-28387 Security feature bypass in verbatim:executive fingerprint secure ssd firmware
- CVE-2022-28386 Security feature bypass in verbatim:gd25lk01-3637-c firmware
- CVE-2022-28385 Security feature bypass in verbatim:executive fingerprint secure ssd firmware
- CVE-2022-28384 Auth bypass in verbatim:keypad secure usb 3.2 gen 1 firmware
- CVE-2022-28383 Security feature bypass in verbatim:executive fingerprint secure ssd firmware
- CVE-2022-28382 Weak cryptography in verbatim:executive fingerprint secure ssd firmware
- CVE-2022-28381 Memory corruption in allmediaserver:allmediaserver
- CVE-2022-28380 Path traversal in rc-httpd project:rc-httpd
- CVE-2022-2838 XML external entity in Eclipse Sphinx
- CVE-2022-28379 Cross-site scripting in nginxproxymanager:nginx proxy manager
- CVE-2022-28378 Cross-site Scripting in craftcms/cms
- CVE-2022-28377 Hardcoded credentials in verizon:lvskihp indoorunit firmware
- CVE-2022-28376 Weak cryptography in verizon:lvskihp firmware
- CVE-2022-28375 Command injection in verizon:lvskihp outdoorunit firmware
- CVE-2022-28374 Command injection in verizon:lvskihp outdoorunit firmware
- CVE-2022-28373 Command injection in verizon:lvskihp indoorunit firmware