Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 351 of 437.
- CVE-2022-27215 Missing permission checks in Jenkins Release Helper Plugin
- CVE-2022-27214 CSRF vulnerability in Jenkins Release Helper Plugin
- CVE-2022-27213 Stored Cross-site Scripting vulnerability in Jenkins Environment Dashboard Plugin
- CVE-2022-27212 Stored Cross-site Scripting vulnerability in Jenkins List Git Branches Parameter Plugin
- CVE-2022-27211 CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials
- CVE-2022-27210 CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials
- CVE-2022-2721 Information disclosure in Octopus Server
- CVE-2022-27209 Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs
- CVE-2022-27208 Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin
- CVE-2022-27207 Stored Cross-site Scripting vulnerability in Jenkins global-build-stats Plugin
- CVE-2022-27206 Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
- CVE-2022-27205 CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF
- CVE-2022-27204 CSRF vulnerability and missing permission checks in Jenkins Extended Choice Parameter Plugin allow SSRF
- CVE-2022-27203 Arbitrary JSON and property file read vulnerability in Jenkins Extended Choice Parameter Plugin
- CVE-2022-27202 Stored Cross-site Scripting vulnerability in Jenkins Extended Choice Parameter Plugin
- CVE-2022-27201 Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin
- CVE-2022-27200 Stored Cross-site Scripting in folder-auth plugin
- CVE-2022-2720 Information disclosure in Octopus Server
- CVE-2022-27199 Missing permission checks in AWS Credentials Plugin
- CVE-2022-27198 CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin
- CVE-2022-27197 Stored Cross-site Scripting vulnerability in Jenkins Dashboard View Plugin
- CVE-2022-27196 Stored Cross-site Scripting vulnerability in Jenkins Favorite Plugin
- CVE-2022-27195 Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin
- CVE-2022-27194 Denial of service in SIMATIC PCS neo (Administration Console)
- CVE-2022-27193 XML External Entities Vulnerability in CVRF-CSAF-Converter
- CVE-2022-27192 Information disclosure in asseco:dvs avilys
- CVE-2022-27191 golang.org/x/crypto/ssh Denial of service via crafted Signer
- CVE-2022-2719 Denial of service in ImageMagick
- CVE-2022-27189 Denial of service in BIG-IP
- CVE-2022-27188 Command injection in CENTUM VP series with VP6E5150(Graphic Builder) installed and B/M9000 VP
- CVE-2022-27187 Privilege escalation in Intel(R) Quartus Prime Standard edition software
- CVE-2022-27185 Denial of service in LinkHub Mesh Wifi
- CVE-2022-27184 Horner Automation Cscape Csfont
- CVE-2022-27183 Reflected XSS in a query parameter of the Monitoring Console
- CVE-2022-27182 Denial of service in BIG-IP
- CVE-2022-27181 Denial of service in BIG-IP APM
- CVE-2022-27180 Privilege escalation in Intel(R) MacCPUID software
- CVE-2022-2718 SQL injection in JoomSport – for Sports: Team & League, Football, Hockey & more
- CVE-2022-27179 ICSA-22-104-03 Red Lion DA50N
- CVE-2022-27178 Denial of service in LinkHub Mesh Wifi
- CVE-2022-27177 Use of Externally-Controlled Format String in consoleme
- CVE-2022-27176 Code injection in RevoWorks SCVX, RevoWorks Browser, and RevoWorks
- CVE-2022-27175 Delta Electronics DIAEnergie SQL Injection in GetCalcTagList
- CVE-2022-27174 Cross-site request forgery in Easy Blog for EC-CUBE4
- CVE-2022-27172 Hardcoded credentials in InRouter302
- CVE-2022-27170 Privilege escalation in Intel(R) Media SDK software
- CVE-2022-2717 SQL injection in JoomSport – for Sports: Team & League, Football, Hockey & more
- CVE-2022-27169 Information disclosure in OAS Platform
- CVE-2022-27168 Cross-site scripting in LiteCart
- CVE-2022-27167 Arbitrary File Deletion in ESET products for Windows
- CVE-2022-27166 XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2
- CVE-2022-27165 SQL injection in cszcms:csz cms
- CVE-2022-27164 SQL injection in cszcms:csz cms
- CVE-2022-27163 SQL injection in cszcms:csz cms
- CVE-2022-27162 SQL injection in cszcms:csz cms
- CVE-2022-27161 SQL injection in cszcms:csz cms
- CVE-2022-2716 Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Text Editor
- CVE-2022-27158 Deserialization in php:pearweb
- CVE-2022-27157 Auth bypass in php:pearweb
- CVE-2022-27156 Cross-site scripting in thedaylightstudio:fuel cms
- CVE-2022-27152 Other in roku:roku os
- CVE-2022-2715 SourceCodester Employee Management System eloginwel.php sql injection
- CVE-2022-27148 Integer overflow in gpac:gpac
- CVE-2022-27147 Use after free in gpac:gpac
- CVE-2022-27146 Memory corruption in gpac:gpac
- CVE-2022-27145 Memory corruption in gpac:gpac
- CVE-2022-27140 File upload in express-fileupload project:express-fileupload
- CVE-2022-2714 Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis
- CVE-2022-27139 Arbitrary file upload in Ghost
- CVE-2022-27135 Memory corruption in xpdfreader:xpdf
- CVE-2022-27134 Business logic in b1:eosio batdappboomx
- CVE-2022-27133 Path traversal in zbzcms:zbzcms
- CVE-2022-27131 File upload in zbzcms:zbzcms
- CVE-2022-2713 Insufficient Session Expiration in cockpit-hq/cockpit
- CVE-2022-27129 File upload in zbzcms:zbzcms
- CVE-2022-27128 Missing authorization in zbzcms:zbzcms
- CVE-2022-27127 SQL injection in zbzcms:zbzcms
- CVE-2022-27126 SQL injection in zbzcms:zbzcms
- CVE-2022-27125 Cross-site scripting in zbzcms:zbzcms
- CVE-2022-27124 SQL injection in angeljudesuarez:insurance management system
- CVE-2022-27123 SQL injection in employee performance evaluation project:employee performance evaluation
- CVE-2022-2712 Path Traversal In Eclipse GlassFish
- CVE-2022-27115 RCE in Studio-42 elFinder on Windows before 2.1.61
- CVE-2022-27114 Integer overflow in debian:debian linux
- CVE-2022-27111 Cross-site scripting in jflyfox:jfinal cms
- CVE-2022-27110 Open redirect in orangehrm:orangehrm
- CVE-2022-2711 WP All Import < 3.6.9 - Admin+ Directory traversal via file upload
- CVE-2022-27109 Open redirect in orangehrm:orangehrm
- CVE-2022-27108 Missing authorization in orangehrm:orangehrm
- CVE-2022-27107 Cross-site scripting in orangehrm:orangehrm
- CVE-2022-27105 Cross-site scripting in digitus:inmailx
- CVE-2022-27104 SQL injection in formalms:formalms
- CVE-2022-27103 element-plus vulnerable to cross-site scripting (XSS) via el-table-column
- CVE-2022-2710 Scroll To Top < 1.4.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-27095 Privilege escalation in battleye:battleye
- CVE-2022-27094 Privilege escalation in sony:playmemories home
- CVE-2022-27090 Open redirect in chshcms:cscms
- CVE-2022-2709 Float to Top Button <= 2.3.6 - Admin+ Stored Cross-Site Scripting
- CVE-2022-27089 Privilege escalation in fujitsu:plugfree network
- CVE-2022-27088 Privilege escalation in ivanti:dsm remote