Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 345 of 437.
- CVE-2022-28022 SQL injection in purchase order management system project:purchase order management system
- CVE-2022-28021 File upload in purchase order management system project:purchase order management system
- CVE-2022-28020 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-2802 SourceCodester Gas Agency Management System login.php sql injection
- CVE-2022-28019 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28018 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28017 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28016 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28015 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28014 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28013 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28012 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28011 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28010 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-2801 SourceCodester Automated Beer Parlour Billing System Login sql injection
- CVE-2022-28009 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28008 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28007 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28006 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2022-28005 Path traversal in 3cx:3cx
- CVE-2022-28002 Information disclosure in movie seat reservation project:movie seat reservation
- CVE-2022-28001 SQL injection in movie seat reservation project:movie seat reservation
- CVE-2022-28000 SQL injection in car rental system project:car rental system
- CVE-2022-2800 SourceCodester Gym Management System clickjacking
- CVE-2022-27992 SQL injection in phpgurukul:zoo management system
- CVE-2022-27991 SQL injection in online banking system project:online banking system
- CVE-2022-2799 Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site Scripting
- CVE-2022-27985 SQL injection in cuppacms:cuppacms
- CVE-2022-27984 SQL injection in cuppacms:cuppacms
- CVE-2022-27983 Path traversal in ruijienetworks:rg-nbr2100g-e firmware
- CVE-2022-27982 File upload in ruijienetworks:rg-nbr2100g-e firmware
- CVE-2022-2798 Affiliates Manager < 2.9.14 - Affiliate CSV Injection
- CVE-2022-27979 Cross-site scripting in tooljet:tooljet
- CVE-2022-27978 Auth bypass in tooljet:tooljet
- CVE-2022-2797 SourceCodester Student Information System view_student.php sql injection
- CVE-2022-27969 Missing authorization in cynet:cynet 360
- CVE-2022-27968 Missing authorization in cynet:cynet 360
- CVE-2022-27967 Missing authorization in cynet:cynet 360
- CVE-2022-27966 Other in netsarang:xshell
- CVE-2022-27965 Other in netsarang:xlpd
- CVE-2022-27964 Other in netsarang:xmanager
- CVE-2022-27963 Other in netsarang:xftp
- CVE-2022-27962 SQL injection in bluecms project:bluecms
- CVE-2022-27961 Cross-site scripting in ofcms project:ofcms
- CVE-2022-27960 Missing authorization in ofcms project:ofcms
- CVE-2022-2796 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-27958 Missing authorization in febs-security project:febs-security
- CVE-2022-27952 Unrestricted Upload of File with Dangerous Type in Payload
- CVE-2022-27950 Denial of service in linux:linux kernel
- CVE-2022-2795 Processing large delegations may severely degrade resolver performance
- CVE-2022-27949 Apache Airflow prior to 2.3.1 may include sensitive values in rendered template
- CVE-2022-27948 Missing authorization in tesla:model 3 firmware
- CVE-2022-27947 Command injection in netgear:r8500 firmware
- CVE-2022-27946 Command injection in netgear:r8500 firmware
- CVE-2022-27945 Command injection in netgear:r8500 firmware
- CVE-2022-27944 Null dereference in foxit:pdf editor
- CVE-2022-27943 Denial of service in fedoraproject:fedora
- CVE-2022-27942 Memory corruption in broadcom:tcpreplay
- CVE-2022-27941 Memory corruption in broadcom:tcpreplay
- CVE-2022-27940 Memory corruption in broadcom:tcpreplay
- CVE-2022-2794 Denial of service in Certain HP PageWide Pro printers
- CVE-2022-27939 Denial of service in broadcom:tcpreplay
- CVE-2022-27938 Denial of service in libsixel:libsixel
- CVE-2022-27937 Denial of service in pexip:pexip infinity
- CVE-2022-27936 Denial of service in pexip:pexip infinity
- CVE-2022-27935 Denial of service in pexip:pexip infinity
- CVE-2022-27934 Denial of service in pexip:pexip infinity
- CVE-2022-27933 Denial of service in pexip:pexip infinity
- CVE-2022-27932 Denial of service in pexip:pexip infinity
- CVE-2022-27931 Denial of service in pexip:pexip infinity
- CVE-2022-27930 Denial of service in pexip:pexip infinity
- CVE-2022-2793 Security feature bypass in Proficy Machine Edition
- CVE-2022-27929 Denial of service in pexip:pexip infinity
- CVE-2022-27928 Denial of service in pexip:pexip infinity
- CVE-2022-27927 SQL injection in microfinance management system project:microfinance management system
- CVE-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS)
- CVE-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload
- CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection
- CVE-2022-27920 Cross-site scripting in fedoraproject:fedora
- CVE-2022-2792 Misconfiguration in Proficy Machine Edition
- CVE-2022-27919 Misconfiguration in gradle:enterprise
- CVE-2022-27914 [20221101] - Core - RXSS through reflection of user input in com_media
- CVE-2022-27913 [20221002] - Core - RXSS through reflection of user input in headings
- CVE-2022-27912 [20221001] - Core - Debug Mode leaks full request payloads including passwords
- CVE-2022-27911 [20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'
- CVE-2022-27910 Extension - Joomlatools - DOCman - Reflected Cross-Site Scripting (XSS) in an image upload function
- CVE-2022-2791 File upload in Proficy Machine Edition
- CVE-2022-27909 Extension - Incorrect Access Control within jdownloads extension
- CVE-2022-27908 SQL injection in zohocorp:manageengine opmanager
- CVE-2022-27907 Server-side request forgery in sonatype:nexus repository manager
- CVE-2022-27906 Path traversal in mendelson:oftp2
- CVE-2022-27905 Privilege escalation in controlup:controlup
- CVE-2022-27904 Race condition in automox:automox
- CVE-2022-27903 Command injection in eve-ng:eve-ng
- CVE-2022-2790 Security feature bypass in Proficy Machine Edition
- CVE-2022-27897 Palantir Gotham included an endpoint that would log arbitrary sized zip files.
- CVE-2022-27896 The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.
- CVE-2022-27895 A component in Foundry logging was found to be capturing sensitive information in logs.
- CVE-2022-27894 The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.
- CVE-2022-27893 Information disclosure in Foundry Magritte plugin osisoft-pi-web-connector