Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 346 of 437.
- CVE-2022-27892 Palantir Gotham included an endpoint that would log arbitrary sized payloads.
- CVE-2022-27891 Missing authorization in Gotham
- CVE-2022-27890 Security feature bypass in AtlasDB
- CVE-2022-2789 Security feature bypass in Proficy Machine Edition
- CVE-2022-27889 Denial of service in Foundry Multipass
- CVE-2022-27888 The Foundry Issues service was found to be logging in a manner that captured session tokens.
- CVE-2022-27887 Cross-site scripting in maccms:maccms
- CVE-2022-27886 Cross-site scripting in maccms:maccms
- CVE-2022-27885 Cross-site scripting in maccms:maccms
- CVE-2022-27884 Cross-site scripting in maccms:maccms
- CVE-2022-27883 Privilege escalation in Trend Micro Antivirus for Mac
- CVE-2022-27882 Integer overflow in openbsd:openbsd
- CVE-2022-27881 Memory corruption in openbsd:openbsd
- CVE-2022-27880 Cross-site scripting in Traffix SDC
- CVE-2022-2788 Path traversal in Proficy Machine Edition
- CVE-2022-27879 Memory corruption in Intel(R) Processors
- CVE-2022-27878 Cross-site scripting in BIG-IP
- CVE-2022-27875 Information disclosure in F5 Access for Android
- CVE-2022-27874 Auth bypass in Intel(R) XMM(TM) 7560 Modem software
- CVE-2022-27873 XML external entity in Fusion360
- CVE-2022-27872 Memory corruption in Navisworks
- CVE-2022-27871 Memory corruption in Autodesk AutoCAD product suite, Revit, Design Review and Navisworks
- CVE-2022-27870 Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-2787 stricter rules on chroot names
- CVE-2022-27869 Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-27868 Use after free in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-27867 Use after free in Autodesk Inventor, Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-27866 Memory corruption in Autodesk Design Review
- CVE-2022-27865 Memory corruption in Autodesk Design Review
- CVE-2022-27864 Memory corruption in Autodesk Design Review
- CVE-2022-27863 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerability
- CVE-2022-27862 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCE
- CVE-2022-27861 WordPress Ninja Popups Plugin <= 4.7.5 is vulnerable to Open Redirection
- CVE-2022-27860 Cross-site request forgery in Footer Text (WordPress plugin)
- CVE-2022-27859 WordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-27858 WordPress Activity Log plugin <= 2.8.3 - CSV Injection vulnerability
- CVE-2022-27856 WordPress Export All URLs Plugin <= 4.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-27855 WordPress Analytics Cat plugin <= 1.0.9 - Plugin Settings change via Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-27854 Cross-site scripting in Psychological tests & quizzes (WordPress plugin)
- CVE-2022-27853 WordPress Contest Gallery plugin <= 13.1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-27852 WordPress KB Support plugin <= 1.5.5 - Multiple Unauth. Stored Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-27851 WordPress Use Any Font plugin <= 6.1.7 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-27850 WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-2785 Arbitrary Memory read in BPF Linux Kernel
- CVE-2022-27849 WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability
- CVE-2022-27848 WordPress Modern Events Calendar Lite plugin <= 6.5.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-27847 WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Import
- CVE-2022-27846 Cross-site request forgery in Yoo Slider – Image Slider & Video Slider (WordPress plugin)
- CVE-2022-27845 WordPress Plausible Analytics plugin <= 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-27844 WordPress WPvivid plugin <= 0.9.70 - Arbitrary File Read vulnerability
- CVE-2022-27843 Other in Kies
- CVE-2022-27842 Other in Smart Switch PC
- CVE-2022-27841 Auth bypass in Samsung Pass
- CVE-2022-27840 Missing authorization in Samsung Recovery
- CVE-2022-27839 Auth bypass in Samsung Internet
- CVE-2022-27838 Missing authorization in FactoryCamera
- CVE-2022-27837 Privilege escalation in Accessibility
- CVE-2022-27836 Path traversal in Samsung Mobile Devices
- CVE-2022-27835 Memory corruption in Samsung Mobile Devices
- CVE-2022-27834 Use after free in Samsung Mobile Devices
- CVE-2022-27833 Integer overflow in Samsung Mobile Devices
- CVE-2022-27832 Memory corruption in Samsung Mobile Devices
- CVE-2022-27831 Memory corruption in Samsung Mobile Devices
- CVE-2022-27830 Other in Samsung Mobile Devices
- CVE-2022-2783 Cross-site request forgery in Octopus Server
- CVE-2022-27829 Other in Samsung Mobile Devices
- CVE-2022-27828 Other in Samsung Mobile Devices
- CVE-2022-27827 Other in Samsung Mobile Devices
- CVE-2022-27826 Security feature bypass in Samsung Mobile Devices
- CVE-2022-27825 Memory corruption in Samsung Mobile Devices
- CVE-2022-27824 Memory corruption in Samsung Mobile Devices
- CVE-2022-27823 Memory corruption in Samsung Mobile Devices
- CVE-2022-27822 Information disclosure in Samsung Mobile Devices
- CVE-2022-27821 Memory corruption in Samsung Mobile Devices
- CVE-2022-27820 Improper Certificate Validation in OWASP ZAP
- CVE-2022-2782 Auth bypass in Octopus Server
- CVE-2022-27819 Unsafe parsing in SWHKD
- CVE-2022-27818 Insecure temporary file usage in SWHKD
- CVE-2022-27817 Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon
- CVE-2022-27816 Data Loss/Denial of Service in SWHKD
- CVE-2022-27815 Insecure Temporary File in SWHKD
- CVE-2022-27814 Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon
- CVE-2022-27813 Unconfigured memory protection modules in Motorola MTM5000
- CVE-2022-27812 Denial of service in stormshield:stormshield network security
- CVE-2022-27811 Command injection in gnome:ocrfeeder
- CVE-2022-27810 Denial of service in Hermes
- CVE-2022-2781 Weak cryptography in Octopus Server
- CVE-2022-27808 Privilege escalation in Intel(R) Ethernet Controller Administrative Tools drivers for Windows
- CVE-2022-27807 Other in Cybozu Garoon
- CVE-2022-27806 Command injection in BIG-IP (Advanced WAF, APM, ASM)
- CVE-2022-27805 Auth bypass in iota All-In-One Security Kit
- CVE-2022-27804 Command injection in iota All-In-One Security Kit
- CVE-2022-27803 Other in Cybozu Garoon
- CVE-2022-27802 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-27801 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-27800 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-2780 Other in Octopus Server
- CVE-2022-27799 Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-27798 Adobe Acrobat Reader DC zoomType Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2022-27797 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability