Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 364 of 437.
- CVE-2022-25601 WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability
- CVE-2022-25600 WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-2560 Path traversal in CompleteFTP
- CVE-2022-25599 WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-25598 Apache DolphinScheduler user registration is vulnerable to ReDoS attacks
- CVE-2022-25597 ASUS RT-AC86U - Command Injection
- CVE-2022-25596 ASUS RT-AC86U - Heap-based buffer overflow
- CVE-2022-25595 ASUS RT-AC86U - Improper Input Validation
- CVE-2022-25594 Microprogram parking lot management system - Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2022-25591 Path traversal in blogengine:blogengine.net
- CVE-2022-25590 Auth bypass in surveyking:surveyking
- CVE-2022-2559 Fluent Support < 1.5.8 - Admin+ SQLi
- CVE-2022-25585 Cross-site scripting in unioncms project:unioncms
- CVE-2022-25584 Information disclosure in flexwatch:fw3170-ps-e firmware
- CVE-2022-25582 Cross-site scripting in classcms project:classcms
- CVE-2022-25581 File upload in classcms:classcms
- CVE-2022-2558 Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing
- CVE-2022-25578 Code injection in taogogo:taocms
- CVE-2022-25577 Hardcoded credentials in alf-banco:alf-banco
- CVE-2022-25576 Cross-Site Request Forgery in Anchor CMS
- CVE-2022-25575 Cross-site scripting in hongmen:parking management system
- CVE-2022-25574 Cross-site scripting in douco:douphp
- CVE-2022-25571 Information disclosure in bluedon:internet access detector
- CVE-2022-25570 Missing authorization in clickstudios:passwordstate
- CVE-2022-2557 WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion
- CVE-2022-25569 Hardcoded credentials in bettinivideo:sgsetup
- CVE-2022-25568 MotionEye allows attackers to access sensitive information
- CVE-2022-25566 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25561 Memory corruption in tenda:ax12 firmware
- CVE-2022-25560 Memory corruption in tenda:ax12 firmware
- CVE-2022-2556 MailChimp for Woocommerce < 2.7.2 - Admin+ SSRF
- CVE-2022-25558 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25557 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25556 Memory corruption in tenda:ax12 firmware
- CVE-2022-25555 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25554 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25553 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25552 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25551 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25550 Memory corruption in tenda:ax1806 firmware
- CVE-2022-2555 Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF
- CVE-2022-25549 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25548 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25547 Memory corruption in tenda:ax1806 firmware
- CVE-2022-25546 Memory corruption in tenda:ax1806 firmware
- CVE-2022-2554 Enable Media Replace < 4.0.0 - Admin+ Path Traversal
- CVE-2022-2553 Auth bypass in Booth
- CVE-2022-25523 Cross-site request forgery in typesettercms:typesetter
- CVE-2022-25521 Hardcoded credentials in nuuo:network video recorder firmware
- CVE-2022-2552 Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
- CVE-2022-25518 Information disclosure in tecnoteca:cmdbuild
- CVE-2022-25517 SQL injection in baomidou:mybatis-plus
- CVE-2022-25516 Memory corruption in nothings:stb truetype.h
- CVE-2022-25515 Memory corruption in nothings:stb truetype.h
- CVE-2022-25514 Memory corruption in nothings:stb truetype.h
- CVE-2022-25512 Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI
- CVE-2022-25511 Path traversal in FreeTAKServer-UI
- CVE-2022-25510 Hard coded credentials in FreeTAKServer
- CVE-2022-2551 Duplicator < 1.4.7 - Unauthenticated Backup Download
- CVE-2022-25508 Improper Authentication in FreeTAKServer
- CVE-2022-25507 Cross-site Scripting in FreeTAKServer-UI
- CVE-2022-25506 SQL Injection in FreeTAKServer-UI
- CVE-2022-25505 SQL injection in taogogo:taocms
- CVE-2022-2550 OS Command Injection in hestiacp/hestiacp
- CVE-2022-25498 Code injection in cuppacms:cuppacms
- CVE-2022-25497 Path traversal in cuppacms:cuppacms
- CVE-2022-25495 File upload in cuppacms:cuppacms
- CVE-2022-25494 SQL injection in online banking system project:online banking system
- CVE-2022-25493 Cross-site scripting in hospital management system project:hospital management system
- CVE-2022-25492 SQL injection in hospital management system project:hospital management system
- CVE-2022-25491 SQL injection in hospital management system project:hospital management system
- CVE-2022-25490 SQL injection in hospital management system project:hospital management system
- CVE-2022-2549 NULL Pointer Dereference in gpac/gpac
- CVE-2022-25489 Cross-site scripting in thedigitalcraft:atomcms
- CVE-2022-25488 SQL injection in thedigitalcraft:atomcms
- CVE-2022-25487 File upload in thedigitalcraft:atomcms
- CVE-2022-25486 Path traversal in cuppacms:cuppacms
- CVE-2022-25485 Path traversal in cuppacms:cuppacms
- CVE-2022-25484 Denial of service in broadcom:tcpreplay
- CVE-2022-25481 Exposure of Resource to Wrong Sphere in ThinkPHP Framework
- CVE-2022-25480 Memory corruption in realtek:rtsper
- CVE-2022-25479 Information disclosure in realtek:rtsper
- CVE-2022-25478 Missing authorization in realtek:rtsper
- CVE-2022-25477 Information disclosure in realtek:rtsper
- CVE-2022-25471 Missing authorization in open-emr:openemr
- CVE-2022-2547 Softing Secure Integration Server NULL Pointer Dereference
- CVE-2022-25465 Memory corruption in espruino:espruino
- CVE-2022-25464 Cross-site scripting in html-js:doracms
- CVE-2022-25462 Denial of service in yafu project:yafu
- CVE-2022-25461 Memory corruption in tenda:ac6 firmware
- CVE-2022-25460 Memory corruption in tenda:ac6 firmware
- CVE-2022-2546 All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS
- CVE-2022-25459 Memory corruption in tenda:ac6 firmware
- CVE-2022-25458 Memory corruption in tenda:ac6 firmware
- CVE-2022-25457 Memory corruption in tenda:ac6 firmware
- CVE-2022-25456 Memory corruption in tenda:ac6 firmware
- CVE-2022-25455 Memory corruption in tenda:ac6 firmware
- CVE-2022-25454 Memory corruption in tenda:ac6 firmware
- CVE-2022-25453 Memory corruption in tenda:ac6 firmware
- CVE-2022-25452 Memory corruption in tenda:ac6 firmware