Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 366 of 437.
- CVE-2022-25325 Use after free in CX-Programmer
- CVE-2022-25324 Denial of Service (DoS)
- CVE-2022-25323 Cross-site scripting in zerof:web server
- CVE-2022-25322 SQL injection in zerof:web server
- CVE-2022-25321 Cross-site scripting in cerebrate-project:cerebrate
- CVE-2022-25320 Information disclosure in cerebrate-project:cerebrate
- CVE-2022-2532 Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting
- CVE-2022-25319 Missing authorization in cerebrate-project:cerebrate
- CVE-2022-25318 Missing authorization in cerebrate-project:cerebrate
- CVE-2022-25317 Cross-site scripting in cerebrate-project:cerebrate
- CVE-2022-25315 Integer overflow in debian:debian linux
- CVE-2022-25314 Integer overflow in debian:debian linux
- CVE-2022-25313 Denial of service in debian:debian linux
- CVE-2022-25312 An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor
- CVE-2022-25311 Privilege escalation in SINEC NMS
- CVE-2022-25310 Null dereference in fribidi
- CVE-2022-2531 Path traversal in GitLab
- CVE-2022-25309 Memory corruption in fribidi
- CVE-2022-25308 Memory corruption in fribidi
- CVE-2022-25307 WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform
- CVE-2022-25306 WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser
- CVE-2022-25305 WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP
- CVE-2022-25304 Denial of Service (DoS)
- CVE-2022-25303 Cross-site Scripting (XSS)
- CVE-2022-25302 Denial of Service (DoS)
- CVE-2022-25301 Prototype Pollution
- CVE-2022-25299 Arbitrary File Write
- CVE-2022-25298 Path Traversal
- CVE-2022-25297 Arbitrary File Write
- CVE-2022-25296 Prototype Pollution
- CVE-2022-25295 Open Redirect
- CVE-2022-25294 Privilege escalation in proofpoint:insider threat management
- CVE-2022-25293 Memory corruption in watchguard:fireware
- CVE-2022-25292 Memory corruption in watchguard:fireware
- CVE-2022-25291 Integer overflow in watchguard:fireware
- CVE-2022-25290 Information disclosure in watchguard:fireware
- CVE-2022-2529 Multiple DoS Attack Vectors in sflow packet handling
- CVE-2022-2528 Missing authorization in Octopus Server
- CVE-2022-25278 Access bypass in Drupal Core
- CVE-2022-25277 Drupal core arbitrary PHP code execution
- CVE-2022-25276 Lack of domain validation in Druple core
- CVE-2022-25275 Drupal core Information Disclosure vulnerability
- CVE-2022-25274 Access bypass in Drupal core
- CVE-2022-25273 Improper input validation in Drupal core
- CVE-2022-25271 Improper input validation in Drupal core
- CVE-2022-25270 Incorrect authorization in Drupal core
- CVE-2022-2527 Cross-site scripting in GitLab
- CVE-2022-25269 Cross-site scripting in passwork:passwork
- CVE-2022-25268 Cross-site request forgery in passwork:passwork
- CVE-2022-25267 Path traversal in passwork:passwork
- CVE-2022-25266 Path traversal in passwork:passwork
- CVE-2022-25265 Security feature bypass in linux:linux kernel
- CVE-2022-25264 Information disclosure in jetbrains:teamcity
- CVE-2022-25263 Command injection in jetbrains:teamcity
- CVE-2022-25262 Auth bypass in jetbrains:hub
- CVE-2022-25261 Cross-site scripting in jetbrains:teamcity
- CVE-2022-25260 Server-side request forgery in jetbrains:hub
- CVE-2022-2526 Use after free in systemd-resolved
- CVE-2022-25259 Cross-site scripting in jetbrains:hub
- CVE-2022-25258 Memory corruption in debian:debian linux
- CVE-2022-25256 Cross-site scripting in sas:web report studio
- CVE-2022-25255 Code injection in qt:qt
- CVE-2022-25252 PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions
- CVE-2022-25251 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
- CVE-2022-25250 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
- CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web
- CVE-2022-25249 PTC Axeda agent and Axeda Desktop Server Path Traversal
- CVE-2022-25248 PTC Axeda agent and Axeda Desktop Server Information Exposure
- CVE-2022-25247 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
- CVE-2022-25246 PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials
- CVE-2022-25245 Information disclosure in zohocorp:manageengine servicedesk plus
- CVE-2022-25244 Information disclosure in hashicorp:vault
- CVE-2022-25243 Security feature bypass in hashicorp:vault
- CVE-2022-25242 Cross-site request forgery in filecloud:filecloud
- CVE-2022-25241 Cross-site request forgery in filecloud:filecloud
- CVE-2022-25238 Stored XSS via HTML fields in SilverStripe Framework
- CVE-2022-25237 Auth bypass in bonitasoft:bonita web
- CVE-2022-25236 Other in debian:debian linux
- CVE-2022-25235 Memory corruption in debian:debian linux
- CVE-2022-25234 Memory corruption in CX-Programmer
- CVE-2022-25231 Denial of Service (DoS)
- CVE-2022-25230 Use after free in CX-Programmer
- CVE-2022-2523 Cross-site Scripting (XSS) - Reflected in beancount/fava
- CVE-2022-25229 Cross-site scripting in Popcorn Time
- CVE-2022-25228 SQL injection in CandidATS
- CVE-2022-25227 Misconfiguration in Thinfinity VNC
- CVE-2022-25226 Auth bypass in ThinVNC
- CVE-2022-25225 SQL injection in Network Olympus
- CVE-2022-25224 Cross-site scripting in Proton
- CVE-2022-25223 SQL injection in Money Transfer Management System
- CVE-2022-25222 SQL injection in Money Transfer Management System
- CVE-2022-25221 Cross-site scripting in Money Transfer Management System
- CVE-2022-25220 Cross-site scripting in PeTeReport
- CVE-2022-2522 Heap-based Buffer Overflow in vim/vim
- CVE-2022-25219 Weak cryptography in Phicomm Routers
- CVE-2022-25218 Weak cryptography in Phicomm Routers
- CVE-2022-25217 Hardcoded credentials in Phicomm Routers
- CVE-2022-25216 Path traversal in DVDFab 12 Player / PlayerFab
- CVE-2022-25215 Missing authorization in Phicomm Routers
- CVE-2022-25214 Missing authorization in Phicomm Routers