Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 347 of 437.
- CVE-2022-27796 Adobe Acrobat Reader DC AcroForm isBoxChecked Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-27795 Adobe Acrobat Reader DC AcroForm isDefaultChecked Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-27794 Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability
- CVE-2022-27793 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2022-27792 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2022-27791 Adobe Acrobat Reader DC Font Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2022-27790 Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-2779 SourceCodester Gas Agency Management System oneWord.php unrestricted upload
- CVE-2022-27789 Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-27788 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2022-27787 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2022-27786 Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-27785 Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-27784 Adobe After Effects Stack Buffer Overflow Could Lead To RCE
- CVE-2022-27783 Adobe After Effects Stack Buffer Overflow Could Lead To RCE
- CVE-2022-27782 Security feature bypass in https://github.com/curl/curl
- CVE-2022-27781 Denial of service in https://github.com/curl/curl
- CVE-2022-27780 Security feature bypass in https://github.com/curl/curl
- CVE-2022-2778 Security feature bypass in Octopus Server
- CVE-2022-27779 Information disclosure in https://github.com/curl/curl
- CVE-2022-27778 Other in https://github.com/curl/curl
- CVE-2022-27777 XSS Vulnerability in Action View tag helpers
- CVE-2022-27776 Information disclosure in https://github.com/curl/curl
- CVE-2022-27775 Information disclosure in https://github.com/curl/curl
- CVE-2022-27774 Information disclosure in https://github.com/curl/curl
- CVE-2022-27773 Privilege escalation in Ivanti Endpoint Manger
- CVE-2022-27772 Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot
- CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-2776 SourceCodester Gym Management System delete_user.php denial of service
- CVE-2022-2775 Fast Flow < 1.2.13 - Admin+ Stored Cross-Site Scripting
- CVE-2022-2774 SourceCodester Library Management System student.php sql injection
- CVE-2022-2773 SourceCodester Apartment Visitor Management System profile.php cross site scripting
- CVE-2022-2772 SourceCodester Apartment Visitor Management System action-visitor.php sql injection
- CVE-2022-2771 SourceCodester Simple Online Book Store System bookPerPub.php sql injection
- CVE-2022-2770 SourceCodester Simple Online Book Store System book.php sql injection
- CVE-2022-2769 SourceCodester Company Website CMS contact cross site scripting
- CVE-2022-2768 SourceCodester Library Management System cross site scripting
- CVE-2022-27677 Privilege escalation in Ryzen™ Master
- CVE-2022-27674 Memory corruption in AMD μProf
- CVE-2022-27673 Missing authorization in AMD Link Android
- CVE-2022-27672 Information disclosure in 1st Gen AMD EPYC™ Processors
- CVE-2022-27671 Information disclosure in SAP BusinessObjects Business Intelligence Platform
- CVE-2022-27670 Denial of service in SAP SQL Anywhere Server
- CVE-2022-2767 SourceCodester Online Admission System index.php cross site scripting
- CVE-2022-27669 Missing authorization in SAP NetWeaver Application Server for Java
- CVE-2022-27668 Missing authorization in SAP NetWeaver and ABAP Platform
- CVE-2022-27667 Information disclosure in SAP BusinessObjects Business Intelligence Platform
- CVE-2022-27666 Memory corruption in debian:debian linux
- CVE-2022-27665 Cross-site scripting in progress:ws ftp server
- CVE-2022-27664 golang.org/x/net/http2 Denial of Service vulnerability
- CVE-2022-27662 Code injection in Traffix SDC
- CVE-2022-27661 Missing authorization in Cybozu Garoon
- CVE-2022-27660 Denial of service in LinkHub Mesh Wifi
- CVE-2022-2766 SourceCodester Loan Management System index.php sql injection
- CVE-2022-27659 Missing authorization in BIG-IP
- CVE-2022-27658 Missing authorization in SAP Innovation management
- CVE-2022-27657 Path traversal in SAP Focused Run (Simple Diagnostics Agent)
- CVE-2022-27656 Cross-site scripting in SAP NetWeaver AS for ABAP and Java (ICM Administration UI)
- CVE-2022-27655 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-27654 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-27653 Memory corruption in Simcenter Femap
- CVE-2022-27652 Incorrect Default Permissions in CRI-O
- CVE-2022-27651 Non-empty default inheritable capabilities for linux container in Buildah
- CVE-2022-27650 Privilege escalation in crun
- CVE-2022-2765 SourceCodester Company Website CMS settings improper authentication
- CVE-2022-27649 Podman's default inheritable capabilities for linux container not empty
- CVE-2022-27648 Memory corruption in Screen Creator
- CVE-2022-27647 Command injection in R6700v3
- CVE-2022-27646 Memory corruption in R6700v3
- CVE-2022-27645 Auth bypass in R6700v3
- CVE-2022-27644 Security feature bypass in R6700v3
- CVE-2022-27643 Memory corruption in R6700v3
- CVE-2022-27642 Auth bypass in R6700v3
- CVE-2022-27641 Integer overflow in R6700v3
- CVE-2022-27640 Denial of service in SIMATIC CP 442-1 RNA
- CVE-2022-2764 Denial of service in undertow
- CVE-2022-27639 Privilege escalation in Intel(R) XMM(TM) 7560 Modem software
- CVE-2022-27638 Privilege escalation in Intel(R) Advanced Link Analyzer Pro and Standard edition
- CVE-2022-27637 Cross-site scripting in PukiWiki
- CVE-2022-27636 Information disclosure in BIG-IP APM
- CVE-2022-27635 Privilege escalation in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-27634 Privilege escalation in BIG-IP APM
- CVE-2022-27633 Information disclosure in LinkHub Mesh Wifi
- CVE-2022-27632 Cross-site request forgery in Rebooter, PoE Rebooter, Scheduler, and Contact Converter
- CVE-2022-27631 Memory corruption in DD-WRT
- CVE-2022-27630 Information disclosure in LinkHub Mesh Wifi
- CVE-2022-2763 WP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-27629 Cross-site request forgery in MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership
- CVE-2022-27628 WordPress WZone – Lite Version Plugin <= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-27627 Cross-site scripting in Cybozu Garoon
- CVE-2022-27626 Race condition in DiskStation Manager (DSM)
- CVE-2022-27625 Memory corruption in DiskStation Manager (DSM)
- CVE-2022-27624 Memory corruption in DiskStation Manager (DSM)
- CVE-2022-27623 Missing authorization in DiskStation Manager (DSM)
- CVE-2022-27622 Server-side request forgery in DiskStation Manager (DSM)
- CVE-2022-27621 Path traversal in USB Copy
- CVE-2022-27620 Path traversal in SSO Server
- CVE-2022-2762 AdminPad < 2.2 - Note Update via CSRF
- CVE-2022-27619 Information disclosure in Synology Note Station Client
- CVE-2022-27618 Path traversal in Storage Analyzer