Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 365 of 437.
- CVE-2022-25451 Memory corruption in tenda:ac6 firmware
- CVE-2022-25450 Memory corruption in tenda:ac6 firmware
- CVE-2022-25449 Memory corruption in tenda:ac6 firmware
- CVE-2022-25448 Memory corruption in tenda:ac6 firmware
- CVE-2022-25447 Memory corruption in tenda:ac6 firmware
- CVE-2022-25446 Memory corruption in tenda:ac6 firmware
- CVE-2022-25445 Memory corruption in tenda:ac6 firmware
- CVE-2022-25441 Command injection in tenda:ac9 firmware
- CVE-2022-25440 Memory corruption in tenda:ac9 firmware
- CVE-2022-2544 Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
- CVE-2022-25439 Memory corruption in tenda:ac9 firmware
- CVE-2022-25438 Command injection in tenda:ac9 firmware
- CVE-2022-25437 Memory corruption in tenda:ac9 firmware
- CVE-2022-25435 Memory corruption in tenda:ac9 firmware
- CVE-2022-25434 Memory corruption in tenda:ac9 firmware
- CVE-2022-25433 Memory corruption in tenda:ac9 firmware
- CVE-2022-25431 Memory corruption in tenda:ac9 firmware
- CVE-2022-2543 Visual Portfolio < 2.18.0 - Unauthenticated CSS Injection
- CVE-2022-25429 Memory corruption in tenda:ac9 firmware
- CVE-2022-25428 Memory corruption in tenda:ac9 firmware
- CVE-2022-25427 Memory corruption in tenda:ac9 firmware
- CVE-2022-25420 Code injection in nttr:goo blog
- CVE-2022-2542 uContext for Clickbank <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-25418 Memory corruption in tenda:ac9 firmware
- CVE-2022-25417 Memory corruption in tenda:ac9 firmware
- CVE-2022-25414 Memory corruption in tenda:ac9 firmware
- CVE-2022-25413 Cross-site scripting in max-3000:maxsite cms
- CVE-2022-25412 Path traversal in max-3000:maxsite cms
- CVE-2022-25411 File upload in max-3000:maxsite cms
- CVE-2022-25410 Cross-site scripting in max-3000:maxsite cms
- CVE-2022-2541 uContext for Amazon <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-25409 Cross-site scripting in hospital management system project:hospital management system
- CVE-2022-25408 Cross-site scripting in hospital management system project:hospital management system
- CVE-2022-25407 Cross-site scripting in hospital management system project:hospital management system
- CVE-2022-25406 SQL injection in tongda2000:tongda2000
- CVE-2022-25405 SQL injection in tongda2000:tongda2000
- CVE-2022-25404 SQL injection in tongda2000:tongda2000
- CVE-2022-25403 SQL injection in hospital management system project:hospital management system
- CVE-2022-25402 Missing authorization in hospital management system project:hospital management system
- CVE-2022-25401 Path traversal in cuppacms:cuppacms
- CVE-2022-2540 Link Optimizer Lite <= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-25399 SQL injection in simple real estate portal system project:simple real estate portal system
- CVE-2022-25398 SQL injection in auto spare parts management project:auto spare parts management
- CVE-2022-25396 SQL injection in cosmetics and beauty product online store project:cosmetics and beauty product online store
- CVE-2022-25395 Cross-site scripting in cosmetics and beauty product online store project:cosmetics and beauty product online store
- CVE-2022-25394 SQL injection in medical store management system project:medical store management system
- CVE-2022-25393 SQL injection in simple bakery shop management project:simple bakery shop management
- CVE-2022-25390 Command injection in dcnglobal:dcme-520 firmware
- CVE-2022-2539 Missing authorization in GitLab
- CVE-2022-25389 Path traversal in dcnglobal:dcme-520 firmware
- CVE-2022-2538 WP Hide & Security Enhancer < 1.8 - Reflected Cross-Site Scripting
- CVE-2022-25377 Appwrite Directory Traversal vulnerability
- CVE-2022-25375 Information disclosure in debian:debian linux
- CVE-2022-25374 Information disclosure in hashicorp:terraform enterprise
- CVE-2022-25373 Cross-site scripting in zohocorp:manageengine supportcenter plus
- CVE-2022-25372 Privilege escalation in pritunl:pritunl-client-electron
- CVE-2022-25371 Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz
- CVE-2022-25370 Unauth Stored XSS vulnerability in the Birt plugin of Apache OFBiz
- CVE-2022-2537 WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting
- CVE-2022-25369 An issue was discovered in Dynamicweb before 9.12.8.
- CVE-2022-25368 Information disclosure in amperecomputing:ampere altra firmware
- CVE-2022-25366 Security feature bypass in cryptomator:cryptomator
- CVE-2022-25365 Other in docker:docker
- CVE-2022-25364 Misconfiguration in gradle:enterprise
- CVE-2022-25363 Missing authorization in watchguard:fireware
- CVE-2022-25361 Path traversal in watchguard:fireware
- CVE-2022-25360 File upload in watchguard:fireware
- CVE-2022-2536 Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass
- CVE-2022-25359 Missing authorization in iclinks:scadaflex ii firmware
- CVE-2022-25358 Path traversal in awful-salmonella-tar project:awful-salmonella-tar
- CVE-2022-25357 Auth bypass in pexip:pexip infinity
- CVE-2022-25356 Code injection in altn:securitygateway
- CVE-2022-25355 EC-CUBE improperly handles HTTP Host header values
- CVE-2022-25354 Prototype Pollution
- CVE-2022-25352 Prototype Pollution
- CVE-2022-25350 Command Injection in puppet-facter
- CVE-2022-2535 SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure
- CVE-2022-25349 Cross-site Scripting (XSS)
- CVE-2022-25348 Other in AttacheCase
- CVE-2022-25347 Delta Electronics DIAEnergie Path Traversal
- CVE-2022-25345 Denial of Service (DoS)
- CVE-2022-25344 Cross-site scripting in olivetti:d-color mf3555 firmware
- CVE-2022-25343 Denial of service in olivetti:d-color mf3555 firmware
- CVE-2022-25342 Missing authorization in olivetti:d-color mf3555 firmware
- CVE-2022-2534 Information disclosure in GitLab
- CVE-2022-25339 Missing authorization in owncloud:owncloud client
- CVE-2022-25338 Missing authorization in owncloud:owncloud client
- CVE-2022-25337 Code injection in ezsystems/ezpublish-kernel
- CVE-2022-25336 Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel
- CVE-2022-25335 Missing authorization in rigoblock:drago
- CVE-2022-25334 Stack overflow on SK_LOAD signature length field in Texas Instruments OMAP L138
- CVE-2022-25333 Flawed SK_LOAD module authenticity check in Texas Instruments OMAP L138
- CVE-2022-25332 SK_LOAD timing side channel during AES module decryption in Texas Instruments OMAP L138
- CVE-2022-25331 Denial of service in Trend Micro ServerProtect for EMC Celerra
- CVE-2022-25330 Integer overflow in Trend Micro ServerProtect for EMC Celerra
- CVE-2022-2533 Auth bypass in GitLab
- CVE-2022-25329 Hardcoded credentials in Trend Micro ServerProtect for EMC Celerra
- CVE-2022-25328 Privilege escalation through command injection in fscrypt
- CVE-2022-25327 Local Denial of Service in fscrypt PAM module
- CVE-2022-25326 Denial of Service in fscrypt