Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 352 of 437.
- CVE-2022-27083 Command injection in tenda:m3 firmware
- CVE-2022-27082 Command injection in tenda:m3 firmware
- CVE-2022-27081 Command injection in tenda:m3 firmware
- CVE-2022-27080 Command injection in tenda:m3 firmware
- CVE-2022-2708 SourceCodester Gym Management System login.php sql injection
- CVE-2022-27079 Command injection in tenda:m3 firmware
- CVE-2022-27078 Command injection in tenda:m3 firmware
- CVE-2022-27077 Command injection in tenda:m3 firmware
- CVE-2022-27076 Command injection in tenda:m3 firmware
- CVE-2022-2707 SourceCodester Online Class and Exam Scheduling System faculty_sched.php sql injection
- CVE-2022-27064 File upload in musical world project:musical world
- CVE-2022-27063 Cross-site scripting in aerocms project:aerocms
- CVE-2022-27062 Cross-site scripting in aerocms project:aerocms
- CVE-2022-27061 File upload in aerocms project:aerocms
- CVE-2022-2706 SourceCodester Online Class and Exam Scheduling System class_sched.php sql injection
- CVE-2022-27055 Information disclosure in ecjia:daojia
- CVE-2022-27052 Privilege escalation in freesshd:freeftpd
- CVE-2022-27050 Privilege escalation in bitcomet:bitcomet
- CVE-2022-2705 SourceCodester Simple Student Information System manage_department.php sql injection
- CVE-2022-27049 Other in raidrive:raidrive
- CVE-2022-27048 Other in moxa:mgate mb3170-m-sc-t firmware
- CVE-2022-27047 File upload in moguit:mogu blog cms
- CVE-2022-27046 Use after free in saitoha:libsixel
- CVE-2022-27044 Memory corruption in saitoha:libsixel
- CVE-2022-27043 Path traversal in yearning:yearning
- CVE-2022-27041 SQL injection in os4ed:opensis
- CVE-2022-2704 SourceCodester Simple E-Learning System downloadFiles.php information disclosure
- CVE-2022-2703 SourceCodester Gym Management System Exercises Module sql injection
- CVE-2022-27022 Memory corruption in tenda:ac9 firmware
- CVE-2022-2702 SourceCodester Company Website CMS Cookie site-settings.php access control
- CVE-2022-27016 Memory corruption in tenda:ac9 firmware
- CVE-2022-2701 SourceCodester Simple E-Learning System claire_blake cross site scripting
- CVE-2022-27008 Memory corruption in f5:njs
- CVE-2022-27007 Use after free in f5:njs
- CVE-2022-27005 Command injection in totolink:a7000r firmware
- CVE-2022-27004 Command injection in totolink:a7000r firmware
- CVE-2022-27003 Command injection in totolink:a7000r firmware
- CVE-2022-27002 Command injection in commscope:arris tr3300 firmware
- CVE-2022-27001 Command injection in commscope:arris tr3300 firmware
- CVE-2022-27000 Command injection in commscope:arris tr3300 firmware
- CVE-2022-2700 SourceCodester Gym Management System GET Parameter sql injection
- CVE-2022-26999 Command injection in commscope:arris tr3300 firmware
- CVE-2022-26998 Command injection in commscope:arris tr3300 firmware
- CVE-2022-26997 Command injection in commscope:arris tr3300 firmware
- CVE-2022-26996 Command injection in commscope:arris tr3300 firmware
- CVE-2022-26995 Command injection in commscope:arris tr3300 firmware
- CVE-2022-26994 Command injection in arris:sbr-ac1200p firmware
- CVE-2022-26993 Command injection in arris:sbr-ac1200p firmware
- CVE-2022-26992 Command injection in arris:sbr-ac1200p firmware
- CVE-2022-26991 Command injection in arris:sbr-ac1200p firmware
- CVE-2022-26990 Command injection in arris:sbr-ac1200p firmware
- CVE-2022-2699 SourceCodester Simple E-Learning System claire_blake sql injection
- CVE-2022-26988 Memory corruption in fastcom:fac1900r firmware
- CVE-2022-26987 Memory corruption in fastcom:fac1900r firmware
- CVE-2022-26986 SQL injection in ImpressCMS
- CVE-2022-26982 Code injection in simplemachines:simple machines forum
- CVE-2022-26981 Memory corruption in apple:ipados
- CVE-2022-26980 Cross-site Scripting in teampass
- CVE-2022-2698 SourceCodester Simple E-Learning System search.php sql injection
- CVE-2022-26979 Null dereference in foxit:pdf editor
- CVE-2022-26978 Cross-site scripting in barco:control room management suite
- CVE-2022-26977 Cross-site scripting in barco:control room management suite
- CVE-2022-26976 Cross-site scripting in barco:control room management suite
- CVE-2022-26975 Missing authorization in barco:control room management suite
- CVE-2022-26974 Cross-site scripting in barco:control room management suite
- CVE-2022-26973 Information disclosure in barco:control room management suite
- CVE-2022-26972 Cross-site scripting in barco:control room management suite
- CVE-2022-26971 Missing authorization in barco:control room management suite
- CVE-2022-2697 SourceCodester Simple E-Learning System comment_frame.php sql injection
- CVE-2022-26969 Insecure default value for CORS configuration
- CVE-2022-26967 Memory corruption in gpac:gpac
- CVE-2022-26966 Information disclosure in debian:debian linux
- CVE-2022-26965 File upload in pluck-cms:pluck
- CVE-2022-26964 Weak cryptography in devolutions:remote desktop manager
- CVE-2022-26962 Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announce
- CVE-2022-26961 Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMS
- CVE-2022-26960 Path Traversal in Studio-42 elFinder through 2.1.60
- CVE-2022-2696 Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.0 - Missing Authorization on AJAX Actions
- CVE-2022-26959 SQL injection in globalnorthstar:northstar club management
- CVE-2022-26954 Open redirect in nopcommerce:nopcommerce
- CVE-2022-26953 Memory corruption in digi:passport firmware
- CVE-2022-26952 Memory corruption in digi:passport firmware
- CVE-2022-26951 Cross-site scripting in rsa:archer
- CVE-2022-26950 Open redirect in rsa:archer
- CVE-2022-2695 Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via 'caption'
- CVE-2022-26949 Missing authorization in rsa:archer
- CVE-2022-26948 Information disclosure in rsa:archer
- CVE-2022-26947 Cross-site scripting in rsa:archer
- CVE-2022-26945 Server-side request forgery in hashicorp:go-getter
- CVE-2022-26944 Information disclosure in percona:xtrabackup
- CVE-2022-26943 Weak PRNG entropy source used for authentication challenge generation in Motorola MTM5000
- CVE-2022-26942 Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000
- CVE-2022-26941 Format string vulnerability in AT+CTGL command in Motorola MTM5000
- CVE-2022-26940 Remote Desktop Protocol Client Information Disclosure Vulnerability
- CVE-2022-2694 SourceCodester Company Website CMS unrestricted upload
- CVE-2022-26939 Storage Spaces Direct Elevation of Privilege Vulnerability
- CVE-2022-26938 Storage Spaces Direct Elevation of Privilege Vulnerability
- CVE-2022-26937 Windows Network File System Remote Code Execution Vulnerability
- CVE-2022-26936 Windows Server Service Information Disclosure Vulnerability
- CVE-2022-26935 Windows WLAN AutoConfig Service Information Disclosure Vulnerability