Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 348 of 437.
- CVE-2022-27617 Path traversal in Synology Calendar
- CVE-2022-27616 Command injection in DiskStation Manager (DSM)
- CVE-2022-27615 Path traversal in DNS Server
- CVE-2022-27614 Information disclosure in Media Server
- CVE-2022-27613 SQL injection in CardDAV Server
- CVE-2022-27612 Memory corruption in Audio Station
- CVE-2022-27611 Path traversal in Audio Station
- CVE-2022-27610 Path traversal in DiskStation Manager (DSM)
- CVE-2022-2761 Information disclosure in GitLab
- CVE-2022-27609 Security feature bypass in One Endpoint
- CVE-2022-27608 Security feature bypass in One Endpoint
- CVE-2022-27607 Memory corruption in axiosys:bento4
- CVE-2022-27600 QTS, QuTS hero, QuTScloud
- CVE-2022-2760 Information disclosure in Octopus Server
- CVE-2022-27599 QVR Pro Client
- CVE-2022-27598 QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)
- CVE-2022-27597 QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)
- CVE-2022-27596 Vulnerability in QTS
- CVE-2022-27595 QVPN Device Client
- CVE-2022-27593 QNAP Photo Station Externally Controlled Reference
- CVE-2022-27592 QVR Smart Client
- CVE-2022-2759 XML external entity in Delta Robot Automation Studio (DRAS)
- CVE-2022-27588 Vulnerability in QVR
- CVE-2022-27586 Auth bypass in SICK SIM1004
- CVE-2022-27585 Auth bypass in SICK SIM1000 FX
- CVE-2022-27584 Auth bypass in SICK SIM2000ST (PPC)
- CVE-2022-27583 Missing authorization in SICK FlexiCompact
- CVE-2022-27582 Auth bypass in SICK SIM4000 (PPC)
- CVE-2022-27581 Weak cryptography in SICK RFU61x Firmware
- CVE-2022-27580 Deserialization in SICK Safety Designer
- CVE-2022-2758 Update
- CVE-2022-27579 Deserialization in SICK Flexi Soft Designer
- CVE-2022-27578 Privilege escalation in SICK Overall Equipment Effectiveness
- CVE-2022-27577 Weak cryptography in SICK MSC800
- CVE-2022-27576 Information disclosure in Samsung Mobile Devices
- CVE-2022-27575 Information disclosure in Samsung Mobile Devices
- CVE-2022-27574 Memory corruption in Samsung Mobile Devices
- CVE-2022-27573 Memory corruption in Samsung Mobile Devices
- CVE-2022-27572 Memory corruption in Samsung Mobile Devices
- CVE-2022-27571 Memory corruption in Samsung Mobile Devices
- CVE-2022-27570 Memory corruption in Samsung Mobile Devices
- CVE-2022-2757 Missing authorization in TMS300 CS
- CVE-2022-27569 Memory corruption in Samsung Mobile Devices
- CVE-2022-27568 Memory corruption in Samsung Mobile Devices
- CVE-2022-27567 Null dereference in Samsung Mobile Devices
- CVE-2022-27563 Overload/denial of service affects HCL VersionVault Express
- CVE-2022-27562 HCL Domino Volt is affected by an unrestricted upload of a dangerous file type
- CVE-2022-27561 HCL Traveler is susceptible to a Reflected Cross-Site Scripting vulnerability in the web admin (LotusTraveler.nsf)
- CVE-2022-27560 An insufficiently protected credential vulnerability affects HCL VersionVault Express
- CVE-2022-2756 Server-Side Request Forgery (SSRF) in kareadita/kavita
- CVE-2022-27558 HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.
- CVE-2022-27551 HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)
- CVE-2022-27549 HCL Launch could disclose sensitive database information to a local user in plain text.
- CVE-2022-27548 HCL Launch is vulnerable to information disclosure which can be read by a local user.
- CVE-2022-27547 HCL iNotes is susceptible to a link to non-existent domain vulnerability.
- CVE-2022-27546 HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability
- CVE-2022-27545 HCL BigFix Web Reports authorized users may perform HTML injection.
- CVE-2022-27544 HCL BigFix Web Reports authorized users may see sensitive information in clear text
- CVE-2022-27541 Race condition in HP PC BIOS
- CVE-2022-27540 Race condition in HP PC BIOS
- CVE-2022-2754 Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi
- CVE-2022-27539 Race condition in HP PC BIOS
- CVE-2022-27538 Race condition in HP PC BIOS
- CVE-2022-27537 Code injection in HP PC BIOS
- CVE-2022-27536 Denial of service in golang:go
- CVE-2022-27535 Other in Kaspersky VPN Secure Connection for Windows
- CVE-2022-27534 Memory corruption in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security
- CVE-2022-27532 Memory corruption in Autodesk 3ds Max
- CVE-2022-27531 Memory corruption in Autodesk 3ds Max
- CVE-2022-27530 Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-2753 Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS
- CVE-2022-27529 Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-27528 Use after free in Autodesk Navisworks
- CVE-2022-27527 Memory corruption in Navisworks
- CVE-2022-27526 Memory corruption in Autodesk Design Review
- CVE-2022-27525 Memory corruption in Autodesk® Design Review
- CVE-2022-27524 Memory corruption in Autodesk Trueview
- CVE-2022-27523 Memory corruption in Autodesk Trueview
- CVE-2022-2752 Potential vulnerabilities in GM login process
- CVE-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass
- CVE-2022-27516 User login brute force protection functionality bypass
- CVE-2022-27513 Remote desktop takeover via phishing
- CVE-2022-27512 Temporary disruption of the ADM license service
- CVE-2022-27511 Missing authorization in Citrix Application Delivery Management (Citrix ADM)
- CVE-2022-27510 Unauthorized access to Gateway user capabilities
- CVE-2022-2751 SourceCodester Company Website CMS add-portfolio.php unrestricted upload
- CVE-2022-27509 Unauthenticated redirection to a malicious website
- CVE-2022-27508 Unauthenticated denial of service
- CVE-2022-27507 Authenticated denial of service
- CVE-2022-27506 Hardcoded credentials in Citrix SD-WAN
- CVE-2022-27505 Reflected cross site scripting (XSS)
- CVE-2022-27503 Cross-site scripting in StoreFront
- CVE-2022-27502 Privilege escalation in realvnc:vnc server
- CVE-2022-27500 Misconfiguration in Intel(R) Support Android application
- CVE-2022-2750 SourceCodester Company Website CMS Add Service add-service.php unrestricted upload
- CVE-2022-27499 Information disclosure in Intel(R) SGX SDK software
- CVE-2022-27498 Path traversal in lansweeper
- CVE-2022-27497 Null dereference in Intel(R) AMT
- CVE-2022-27496 Cross-site scripting in Zero-channel BBS Plus
- CVE-2022-27495 Missing authorization in NGINX Service Mesh