Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 344 of 437.
- CVE-2022-2815 Insecure Storage of Sensitive Information in publify/publify
- CVE-2022-28149 Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin
- CVE-2022-28148 Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin
- CVE-2022-28147 Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin
- CVE-2022-28146 Arbitrary file read vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
- CVE-2022-28145 Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
- CVE-2022-28144 Missing permission checks in Jenkins Proxmox Plugin
- CVE-2022-28143 CSRF vulnerability in Proxmox Plugin
- CVE-2022-28142 SSL/TLS certificate validation globally disabled by Jenkins Proxmox Plugin
- CVE-2022-28141 Password stored in plain text by Jenkins Proxmox Plugin
- CVE-2022-28140 XXE vulnerability in Jenkins Flaky Test Handler Plugin
- CVE-2022-2814 SourceCodester Simple and Nice Shopping Cart Script login.php cross site scripting
- CVE-2022-28139 Missing permission check in Jenkins RocketChat Notifier Plugin
- CVE-2022-28138 CSRF vulnerability in Jenkins RocketChat Notifier Plugin
- CVE-2022-28137 Missing permission check in Jenkins JiraTestResultReporter Plugin
- CVE-2022-28136 CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter Plugin
- CVE-2022-28135 Plaintext storage in Jenkins instant-messaging Plugin
- CVE-2022-28134 Missing permission checks in Jekins Bitbucket Server Integration Plugin
- CVE-2022-28133 Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin
- CVE-2022-28132 The T-Soft E-Commerce 4 web application is susceptible to SQL injection (SQLi) attacks when authenticated as an admin or privileged user.
- CVE-2022-28131 Stack exhaustion from deeply nested XML documents in encoding/xml
- CVE-2022-2813 SourceCodester Guest Management System cleartext storage
- CVE-2022-28129 Insufficient Validation of HTTP/1.x Headers
- CVE-2022-28128 Other in AttacheCase
- CVE-2022-28127 Path traversal in R1510
- CVE-2022-28126 Privilege escalation in Intel(R) XMM(TM) 7560 Modem software
- CVE-2022-28120 File upload in rainier:open virtual simulation experiment teaching management platform
- CVE-2022-2812 SourceCodester Guest Management System index.php sql injection
- CVE-2022-28118 RCE in SiteServer CMS
- CVE-2022-28117 Server-side request forgery in naviwebs:navigate cms
- CVE-2022-28116 SQL injection in online banking system project:online banking system
- CVE-2022-28115 SQL injection in online sports complex booking project:online sports complex booking
- CVE-2022-28114 Path traversal in dscms project:dscms
- CVE-2022-28113 Auth bypass in fantec:mwid25-ds firmware
- CVE-2022-28111 MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter
- CVE-2022-28110 SQL injection in hotel management system project:hotel management system
- CVE-2022-2811 SourceCodester Guest Management System myform.php cross site scripting
- CVE-2022-28109 Cross-site request forgery in selenium:selenium grid
- CVE-2022-28108 Selenium Server (Grid) CSRF
- CVE-2022-28106 Auth bypass in online sports complex booking system project:online sports complex booking system
- CVE-2022-28105 SQL injection in online sports complex booking system project:online sports complex booking system
- CVE-2022-28104 File upload in foxit:pdf editor
- CVE-2022-28102 Cross-site scripting in php mysql admin panel generator project:php mysql admin panel generator
- CVE-2022-28101 Cross-site scripting in lyonbros:turtl
- CVE-2022-28099 SQL injection in poultry farm management system project:poultry farm management system
- CVE-2022-28096 Code injection in skycaiji:skycaiji
- CVE-2022-28094 Cross-site scripting in online sports complex booking system project:online sports complex booking system
- CVE-2022-28093 Path traversal in online sports complex booking system project:online sports complex booking system
- CVE-2022-28090 Server-side request forgery in ujcms:jspxcms
- CVE-2022-2809 Unauthenticated out of bounds heap write in bmcweb
- CVE-2022-28085 Memory corruption in htmldoc project:htmldoc
- CVE-2022-28082 Memory corruption in tenda:ax12 firmware
- CVE-2022-28081 Cross-site scripting in ar-php:arphp
- CVE-2022-28080 SQL injection in event management system project:event management system
- CVE-2022-2808 IDOR in Prens Student Information System
- CVE-2022-28079 SQL injection in college management system project:college management system
- CVE-2022-28078 Cross-site scripting in home owners collection management system project:home owners collection management system
- CVE-2022-28077 Cross-site scripting in home owners collection management system project:home owners collection management system
- CVE-2022-28076 Command injection in seacms:seacms
- CVE-2022-28074 Cross-site scripting in fit2cloud:halo
- CVE-2022-28073 Use after free in radare:radare2
- CVE-2022-28072 Memory corruption in radare:radare2
- CVE-2022-28071 Use after free in radare:radare2
- CVE-2022-28070 Null dereference in radare:radare2
- CVE-2022-2807 SQL Injection in Prens Student Information System
- CVE-2022-28069 Memory corruption in radare:radare2
- CVE-2022-28068 Memory corruption in radare:radare2
- CVE-2022-28067 Denial of service in sandboxie:sandboxie
- CVE-2022-28063 Information disclosure in simple bakery shop management system project:simple bakery shop management system
- CVE-2022-28062 File upload in online car rental system project:online car rental system
- CVE-2022-28060 SQL injection in victor cms project:victor cms
- CVE-2022-2806 sosreport Exposure of Sensitive Information vulnerability
- CVE-2022-28059 Path traversal in verydows:verydows
- CVE-2022-28058 Path traversal in verydows:verydows
- CVE-2022-28056 Incorrect Permission Assignment for Critical Resource in ShopXO
- CVE-2022-28055 Command injection in fusionpbx:fusionpbx
- CVE-2022-28054 Code injection in vandyke:vshell
- CVE-2022-28053 File upload in typemill:typemill
- CVE-2022-28052 Path traversal in roothub:roothub
- CVE-2022-28051 Cross-site scripting in seeddms:seeddms
- CVE-2022-2805 Information disclosure in ovirt-engine
- CVE-2022-28049 Null dereference in f5:njs
- CVE-2022-28048 Integer overflow in fedoraproject:fedora
- CVE-2022-28044 Memory corruption in debian:debian linux
- CVE-2022-28042 Use after free in debian:debian linux
- CVE-2022-28041 Integer overflow in debian:debian linux
- CVE-2022-2804 SourceCodester Zoo Management System apply_vacancy.php unrestricted upload
- CVE-2022-28036 SQL injection in thedigitalcraft:atomcms
- CVE-2022-28035 SQL injection in thedigitalcraft:atomcms
- CVE-2022-28034 SQL injection in thedigitalcraft:atomcms
- CVE-2022-28033 SQL injection in thedigitalcraft:atomcms
- CVE-2022-28032 SQL injection in thedigitalcraft:atomcms
- CVE-2022-28030 SQL injection in simple real estate portal system project:simple real estate portal system
- CVE-2022-2803 SourceCodester Zoo Management System animals.php sql injection
- CVE-2022-28029 SQL injection in simple real estate portal system project:simple real estate portal system
- CVE-2022-28028 SQL injection in simple real estate portal system project:simple real estate portal system
- CVE-2022-28026 SQL injection in oretnom23:student grading system
- CVE-2022-28025 SQL injection in oretnom23:student grading system
- CVE-2022-28024 SQL injection in oretnom23:student grading system
- CVE-2022-28023 SQL injection in purchase order management system project:purchase order management system