Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 350 of 437.
- CVE-2022-2736 SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload
- CVE-2022-27359 Null dereference in foxit:pdf editor
- CVE-2022-27357 File upload in ecommerce-website project:ecommerce-website
- CVE-2022-27352 File upload in simple house rental system project:simple house rental system
- CVE-2022-27351 File upload in phpgurukul:zoo management system
- CVE-2022-2735 Misconfiguration in ClusterLabs/pcs
- CVE-2022-27349 File upload in socialcodia:social codia sms
- CVE-2022-27348 Cross-site scripting in socialcodia:social codia sms
- CVE-2022-27346 File upload in ecommerce-website project:ecommerce-website
- CVE-2022-27342 SQL injection in link-admin project:link-admin
- CVE-2022-27341 SQL injection in jfinalcms project:jfinalcms
- CVE-2022-27340 Cross Site Request Forgery in Mingsoft MCMS
- CVE-2022-2734 Improper Restriction of Rendered UI Layers or Frames in openemr/openemr
- CVE-2022-27337 Denial of service in debian:debian linux
- CVE-2022-27336 Code injection in seacms:seacms
- CVE-2022-27333 Other in idccms:idccms
- CVE-2022-27332 Missing authorization in zammad:zammad
- CVE-2022-27331 Missing authorization in zammad:zammad
- CVE-2022-27330 Cross-site scripting in e-commerce website project:e-commerce website
- CVE-2022-2733 Cross-site Scripting (XSS) - Reflected in openemr/openemr
- CVE-2022-2732 Missing Authorization in openemr/openemr
- CVE-2022-27313 Arbitrary file deletion in gitea
- CVE-2022-27311 Server side request forgery in gibbon
- CVE-2022-2731 Cross-site Scripting (XSS) - Reflected in openemr/openemr
- CVE-2022-27308 Cross-site scripting in phprojekt phpsimplygest project:phprojekt phpsimplygest
- CVE-2022-27305 Auth bypass in gibbonedu:gibbon
- CVE-2022-27304 SQL injection in oretnom23:student grading system
- CVE-2022-2730 Authorization Bypass Through User-Controlled Key in openemr/openemr
- CVE-2022-27299 SQL injection in hospital management system project:hospital management system
- CVE-2022-27295 Memory corruption in dlink:dir-619 firmware
- CVE-2022-27294 Memory corruption in dlink:dir-619 firmware
- CVE-2022-27293 Memory corruption in dlink:dir-619 firmware
- CVE-2022-27292 Memory corruption in dlink:dir-619 firmware
- CVE-2022-27291 Memory corruption in dlink:dir-619 firmware
- CVE-2022-27290 Memory corruption in dlink:dir-619 firmware
- CVE-2022-2729 Cross-site Scripting (XSS) - DOM in openemr/openemr
- CVE-2022-27289 Memory corruption in dlink:dir-619 firmware
- CVE-2022-27288 Memory corruption in dlink:dir-619 firmware
- CVE-2022-27287 Memory corruption in dlink:dir-619 ax firmware
- CVE-2022-27286 Memory corruption in dlink:dir-619 ax firmware
- CVE-2022-27280 Cross-site scripting in inhandnetworks:inrouter 900 firmware
- CVE-2022-2728 SourceCodester Gym Management System index.php sql injection
- CVE-2022-27279 Path traversal in inhandnetworks:inrouter 900 firmware
- CVE-2022-27277 Path traversal in inhandnetworks:inrouter 900 firmware
- CVE-2022-27276 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-27275 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-27274 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-27273 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-27272 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-27271 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-27270 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-2727 SourceCodester Gym Management System login.php sql injection
- CVE-2022-27269 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-27268 Command injection in inhandnetworks:inrouter 900 firmware
- CVE-2022-27263 Unrestricted Upload of File with Dangerous Type in Strapi
- CVE-2022-27262 File upload in sailsjs:skipper
- CVE-2022-27261 Express-FileUpload Arbitrary File Overwrite
- CVE-2022-27260 Unrestricted Upload of File with Dangerous Type in ButterCMS
- CVE-2022-2726 SEMCMS Ant_Check.php sql injection
- CVE-2022-27258 Cross-site scripting in hubzilla:hubzilla
- CVE-2022-27257 Path traversal in hubzilla:hubzilla
- CVE-2022-27256 Path traversal in hubzilla:hubzilla
- CVE-2022-27255 Memory corruption in realtek:ecos msdk firmware
- CVE-2022-27254 Auth bypass in honda:civic 2018 firmware
- CVE-2022-27250 Other in unisoc:unisoc chipset
- CVE-2022-2725 SourceCodester Company Website CMS add-blog.php cross site scripting
- CVE-2022-27249 File upload in idearespa:reftree
- CVE-2022-27248 Path traversal in idearespa:reftree
- CVE-2022-27247 Missing authorization in cdsoft:winhotel.mx
- CVE-2022-27246 Cross-site scripting in misp-project:misp
- CVE-2022-27245 Server-side request forgery in misp-project:misp
- CVE-2022-27244 Cross-site scripting in misp-project:misp
- CVE-2022-27243 Path traversal in misp-project:misp
- CVE-2022-27242 Memory corruption in OpenV2G
- CVE-2022-27241 Information disclosure in Mendix Applications using Mendix 7
- CVE-2022-27240 Memory corruption in glewlwyd sso server project:glewlwyd sso server
- CVE-2022-2724 SourceCodester Employee Management System aprocess.php sql injection
- CVE-2022-27239 Memory corruption in debian:debian linux
- CVE-2022-27238 Cross-site scripting in bigbluebutton:bigbluebutton
- CVE-2022-27237 Cross-site scripting in ni:flexlogger
- CVE-2022-27235 WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities
- CVE-2022-27234 Server-side request forgery in CVAT software maintained by Intel(R)
- CVE-2022-27233 XML external entity in Intel(R) Quartus Prime Pro and Standard edition software
- CVE-2022-27231 Cross-site scripting in WP Statistics
- CVE-2022-27230 Cross-site scripting in BIG-IP APM
- CVE-2022-2723 SourceCodester Employee Management System eprocess.php sql injection
- CVE-2022-27229 Path traversal in Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software
- CVE-2022-27228 Code injection in bitrix24:bitrix24
- CVE-2022-27227 Other in fedoraproject:fedora
- CVE-2022-27226 Cross-site request forgery in irz:rl01 firmware
- CVE-2022-27225 Information disclosure in gradle:enterprise
- CVE-2022-27224 Command injection in galsys:nts-6002-gps firmware
- CVE-2022-27223 Memory corruption in debian:debian linux
- CVE-2022-27221 Information disclosure in SINEMA Remote Connect Server
- CVE-2022-27220 Misconfiguration in SINEMA Remote Connect Server
- CVE-2022-2722 SourceCodester Simple Student Information System manage_course.php sql injection
- CVE-2022-27219 Misconfiguration in SINEMA Remote Connect Server
- CVE-2022-27218 Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin
- CVE-2022-27217 Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin
- CVE-2022-27216 Passwords stored in plain text by Jenkins dbCharts Plugin