Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 362 of 437.
- CVE-2022-25803 Open redirect in bestpractical:request tracker
- CVE-2022-25802 Cross-site scripting in bestpractical:request tracker
- CVE-2022-25801 Server-side request forgery in bestpractical:request tracker for incident response
- CVE-2022-25800 Server-side request forgery in bestpractical:request tracker for incident response
- CVE-2022-2580 Heap-based Buffer Overflow in vim/vim
- CVE-2022-25799 An open redirect vulnerability exists in CERT/CC VINCE software prior to version 1.50.0
- CVE-2022-25797 Memory corruption in Autodesk Trueview
- CVE-2022-25796 Memory corruption in Autodesk Navisworks
- CVE-2022-25795 Memory corruption in Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac
- CVE-2022-25794 Memory corruption in Autodesk FBX Review
- CVE-2022-25793 Memory corruption in Autodesk 3ds Max
- CVE-2022-25792 Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-25791 Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-25790 Memory corruption in Autodesk Navisworks, Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-2579 SourceCodester Garage Management System createUser.php cross site scripting
- CVE-2022-25789 Use after free in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-25788 Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
- CVE-2022-25787 GTA URLs issued by LMM WEB API may leak information
- CVE-2022-25786 GateManager debug interface is included in production builds
- CVE-2022-25785 Buffer overrun
- CVE-2022-25784 User controllable HTML element attribute (potential XSS)
- CVE-2022-25783 Hacking attempts from logged-in users are not properly logged by GM
- CVE-2022-25782 Insufficient privilege checks on object access and updates.
- CVE-2022-25781 Reflected XSS issues in GateManager
- CVE-2022-25780 Information leak via device availability query function
- CVE-2022-2578 SourceCodester Garage Management System createUser.php access control
- CVE-2022-25779 Insufficient scope checks allows adding unrelated audit log entries
- CVE-2022-25778 Unload handlers may unintentionally defeat CSRF guards
- CVE-2022-25777 Server-Side Request Forgery in Asset section
- CVE-2022-25776 Sensitive Data Exposure due to inadequate user permission settings
- CVE-2022-25775 SQL Injection in dynamic Reports
- CVE-2022-25774 XSS in Notifications via saving Dashboards
- CVE-2022-25773 Relative Path Traversal in assets file upload
- CVE-2022-25772 Cross-site Scripting vulnerability in Mautic's tracking pixel functionality
- CVE-2022-25770 Insufficient authentication in upgrade flow
- CVE-2022-2577 SourceCodester Garage Management System edituser.php sql injection
- CVE-2022-25769 Improper regex in htaccess file
- CVE-2022-25768 Improper Access Control in UI upgrade process
- CVE-2022-25767 Remote Code Execution
- CVE-2022-25766 Remote Code Execution (RCE)
- CVE-2022-25765 Command Injection
- CVE-2022-25763 Improper input validation on HTTP/2 headers
- CVE-2022-25762 Response mix-up with WebSocket concurrent send and close
- CVE-2022-25761 Denial of Service (DoS)
- CVE-2022-25760 Arbitrary Code Injection
- CVE-2022-2576 Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch
- CVE-2022-25759 Remote Code Injection
- CVE-2022-25758 Regular Expression Denial of Service (ReDoS)
- CVE-2022-25757 Apache APISIX: the body_schema check in request-validation plugin can be bypassed
- CVE-2022-25756 Cross-site scripting in SCALANCE X302-7 EEC (230V)
- CVE-2022-25755 Other in SCALANCE X302-7 EEC (230V)
- CVE-2022-25754 Cross-site request forgery in SCALANCE X302-7 EEC (230V)
- CVE-2022-25753 Memory corruption in SCALANCE X302-7 EEC (230V)
- CVE-2022-25752 Weak cryptography in SCALANCE X302-7 EEC (230V)
- CVE-2022-25751 Other in SCALANCE X302-7 EEC (230V)
- CVE-2022-25750 Memory corruption in Snapdragon Mobile
- CVE-2022-2575 WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSS
- CVE-2022-25749 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVE-2022-25748 Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVE-2022-25747 Buffer Over-read in MODEM
- CVE-2022-25746 Buffer Copy Without Checking Size of Input in Kernel
- CVE-2022-25745 Always Incorrect Control Flow Implementation in MODEM
- CVE-2022-25743 Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2022-25742 Denial of service in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
- CVE-2022-25741 Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- CVE-2022-25740 Buffer Copy Without Checking Size of Input in MODEM
- CVE-2022-2574 Meks Easy Social Share < 1.2.8 - Admin+ Stored Cross-Site Scripting
- CVE-2022-25739 Null Point Dereference in MODEM
- CVE-2022-25738 Buffer Over-read in MODEM
- CVE-2022-25737 Use of Uninitialized Variable in MODEM
- CVE-2022-25736 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVE-2022-25735 Null Pointer Dereference in MODEM
- CVE-2022-25734 Loop with Unreachable Exit Condition in MODEM
- CVE-2022-25733 Null Pointer Dereference in MODEM
- CVE-2022-25732 Buffer Over-read in MODEM
- CVE-2022-25731 Incorrect Calculation of Buffer Size in MODEM
- CVE-2022-25730 Buffer Over-read in MODEM
- CVE-2022-25729 Improper Input Validation in MODEM
- CVE-2022-25728 Buffer Over-read in MODEM
- CVE-2022-25727 Memory corruption in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
- CVE-2022-25726 Buffer Over-read in MODEM
- CVE-2022-25725 Use-after-Free in MODEM
- CVE-2022-25724 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2022-25723 Use after free in Snapdragon Mobile
- CVE-2022-25722 Information Exposure in DSP Services
- CVE-2022-25721 Incorrect Type Conversion in Video driver
- CVE-2022-25720 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2022-2572 Auth bypass in Octopus Server
- CVE-2022-25719 Information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVE-2022-25718 Weak cryptography in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVE-2022-25717 Use-After-Free Issue in Display
- CVE-2022-25716 Time-of-check Time-of-use Race Condition in Multimedia Framework
- CVE-2022-25715 Incorrect type casting in Display driver
- CVE-2022-25713 Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
- CVE-2022-25712 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables
- CVE-2022-25711 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- CVE-2022-25710 Null dereference in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
- CVE-2022-2571 Heap-based Buffer Overflow in vim/vim
- CVE-2022-25709 Use of Out-of-range Pointer Offset in Data Modem
- CVE-2022-25708 Memory corruption in Snapdragon Connectivity, Snapdragon Mobile