Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 356 of 437.
- CVE-2022-26607 File upload in baigo:baigo cms
- CVE-2022-26605 File upload in dascomsoft:eziosuite
- CVE-2022-2660 Hardcoded credentials in Industrial Automation DIALink
- CVE-2022-26597 Liferay Portal and Liferay DXP allows arbitrary injection via the site name
- CVE-2022-26596 Liferay Portal and Liferay DXP allows arbitrary injection via web content template names
- CVE-2022-26595 Liferay Portal and Liferay DXP fails to check permissions to view sites/groups
- CVE-2022-26594 Liferay Portal and Liferay DXP allows arbitrary injection via form field
- CVE-2022-26593 Liferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category
- CVE-2022-26592 Memory corruption in sass-lang:libsass
- CVE-2022-26591 Missing authorization in fantec:mwid25-ds firmware
- CVE-2022-26589 Cross-site request forgery in pluck-cms:pluck
- CVE-2022-26588 Cross-site request forgery in icehrm:icehrm
- CVE-2022-26585 SQL injection in net.mingsoft:ms-mcms
- CVE-2022-26582 Command injection in paxtechnology:paydroid
- CVE-2022-26581 Missing authorization in paxtechnology:paydroid
- CVE-2022-26580 Command injection in paxtechnology:paydroid
- CVE-2022-2658 WP Spell Check < 9.13 - Admin+ Stored Cross-Site Scripting
- CVE-2022-26579 Security feature bypass in paxtechnology:paydroid
- CVE-2022-26573 Cross-site scripting in maccms:maccms
- CVE-2022-26572 Missing authorization in xerox:colorqube 8580 firmware
- CVE-2022-2657 Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX Calls
- CVE-2022-26565 Cross-site scripting in totaljs:content management system
- CVE-2022-26564 Cross-site scripting in digitaldruid:hoteldruid
- CVE-2022-26563 Privilege escalation in tildeslash:monit
- CVE-2022-26562 Auth bypass in kopano:groupware core
- CVE-2022-2656 SourceCodester Multi Language Hotel Management Software sql injection
- CVE-2022-26555 Cross-site scripting in eova:eova
- CVE-2022-2655 Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting
- CVE-2022-26546 Missing authorization in hospital management system project:hospital management system
- CVE-2022-2654 Classima < 2.1.11 - Reflected Cross-Site Scripting
- CVE-2022-26536 Command injection in tenda:m3 firmware
- CVE-2022-26534 Denial of service in fisco-bcos:fisco-bcos
- CVE-2022-26533 Cross-site Scripting in Alist
- CVE-2022-26532 Command injection in ATP series firmware
- CVE-2022-26531 Memory corruption in ATP series firmware
- CVE-2022-26530 Auth bypass in swaywm:swaylock
- CVE-2022-2653 Path Traversal in plankanban/planka
- CVE-2022-26529 Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
- CVE-2022-26528 Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
- CVE-2022-26527 Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
- CVE-2022-26526 Misconfiguration in anaconda:anaconda3
- CVE-2022-26523 The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute
- CVE-2022-26522 The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute
- CVE-2022-26521 File upload in abantecart:abantecart
- CVE-2022-26520 pgjdbc Arbitrary File Write Vulnerability
- CVE-2022-2652 Use of Externally-Controlled Format String in umlaeute/v4l2loopback
- CVE-2022-26519 Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts
- CVE-2022-26518 Command injection in InRouter302
- CVE-2022-26517 Denial of service in BIG-IP
- CVE-2022-26516 ICSA-22-104-03 Red Lion DA50N
- CVE-2022-26514 Delta Electronics DIAEnergie SQL Injection in DIAE_tagHandler.ashx
- CVE-2022-26513 Memory corruption in Intel(R) XMM(TM) 7560 Modem software
- CVE-2022-26512 Privilege escalation in Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit
- CVE-2022-26511 Code injection in WPS Presentation
- CVE-2022-26510 Security feature bypass in InRouter302
- CVE-2022-2651 Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm
- CVE-2022-26509 Information disclosure in Intel(R) SGX SDK software
- CVE-2022-26508 Auth bypass in Intel(R) SDP Tool
- CVE-2022-26507 Memory corruption in att:xmill
- CVE-2022-26505 Security feature bypass in debian:debian linux
- CVE-2022-26504 Auth bypass in veeam:veeam backup \& replication
- CVE-2022-26503 Deserialization in veeam:veeam
- CVE-2022-26501 Veeam Backup & Replication Remote Code Execution
- CVE-2022-26500 Veeam Backup & Replication Remote Code Execution
- CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger
- CVE-2022-26499 Server-side request forgery in debian:debian linux
- CVE-2022-26498 Denial of service in debian:debian linux
- CVE-2022-26497 Cross-site scripting in bigbluebutton:greenlight
- CVE-2022-26496 Memory corruption in debian:debian linux
- CVE-2022-26495 Integer overflow in debian:debian linux
- CVE-2022-26494 Cross-site scripting in primekey:signserver
- CVE-2022-26493 miniOrange SAML Authentication Bypass
- CVE-2022-26491 Security feature bypass in debian:debian linux
- CVE-2022-26490 Memory corruption in debian:debian linux
- CVE-2022-26488 Privilege escalation in netapp:active iq unified manager
- CVE-2022-26486 Mozilla Firefox Use-After-Free
- CVE-2022-26485 Mozilla Firefox Use-After-Free
- CVE-2022-26484 Path traversal in veritas:infoscale operations manager
- CVE-2022-26483 Cross-site scripting in veritas:infoscale operations manager
- CVE-2022-26482 Command injection in poly:eagleeye director ii firmware
- CVE-2022-26481 Command injection in poly:g7500 firmware
- CVE-2022-2648 SourceCodester Multi Language Hotel Management Software sql injection
- CVE-2022-26479 Auth bypass in poly:eagleeye director ii firmware
- CVE-2022-26477 Denial of service in readExternal method
- CVE-2022-26476 Hardcoded credentials in Spectrum Power 4
- CVE-2022-26475 Memory corruption in MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6853, MT6855, MT6873, MT6875, MT6879, MT6883, MT6885, MT6889, MT6895, MT6983, MT7663, MT7902, MT7921, MT8167S, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8512A, MT8518, MT8532, MT8667, MT8695, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789
- CVE-2022-26474 Memory corruption in MT6789, MT6855, MT6879, MT6895, MT6983
- CVE-2022-26473 Use after free in MT6789, MT6855, MT6879, MT6895, MT6983, MT8168, MT8365, MT8695, MT8696, MT8798
- CVE-2022-26472 Privilege escalation in MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8321, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797
- CVE-2022-26471 Privilege escalation in MT6580, MT6739, MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8321, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797
- CVE-2022-26470 Memory corruption in MT6879, MT6895, MT6983, MT8321, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789
- CVE-2022-2647 jeecg-boot unrestricted upload
- CVE-2022-26469 Privilege escalation in MT6580, MT6735, MT6737, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797
- CVE-2022-26468 Memory corruption in MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8797
- CVE-2022-26467 Memory corruption in MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8183, MT8321, MT8365, MT8385, MT8666, MT8675, MT8765, MT8768, MT8786, MT8788, MT8797
- CVE-2022-26466 Integer overflow in MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8512A, MT8518, MT8519 M1V1, MT8519 P1V1, MT8791, MT8797, MT8798
- CVE-2022-26465 Memory corruption in MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8512A, MT8518, MT8791, MT8797, MT8798
- CVE-2022-26464 Memory corruption in MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797
- CVE-2022-26463 Memory corruption in MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797
- CVE-2022-26462 Memory corruption in MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797