Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 368 of 437.
- CVE-2022-25095 Auth bypass in home owners collection management system project:home owners collection management system
- CVE-2022-25094 Code injection in home owners collection management system project:home owners collection management system
- CVE-2022-25091 Missing authorization in infopop:ultimate bulletin board
- CVE-2022-25090 Race condition in kofax:printix
- CVE-2022-2509 Memory corruption in GnuTLS
- CVE-2022-25089 Privilege escalation in kofax:printix
- CVE-2022-25084 Command injection in totolink:t6 firmware
- CVE-2022-25083 Command injection in totolink:a860r firmware
- CVE-2022-25082 Command injection in totolink:a950rg firmware
- CVE-2022-25081 Command injection in totolink:t10 v2 firmware
- CVE-2022-25080 Command injection in totolink:a830r firmware
- CVE-2022-2508 Information disclosure in Octopus Server
- CVE-2022-25079 Command injection in totolink:a810r firmware
- CVE-2022-25078 Command injection in totolink:a3600r firmware
- CVE-2022-25077 Command injection in totolink:a3100r firmware
- CVE-2022-25076 Command injection in totolink:a800r firmware
- CVE-2022-25075 Command injection in totolink:a3000ru firmware
- CVE-2022-25074 Memory corruption in tp-link:tl-wr902ac firmware
- CVE-2022-25073 Memory corruption in tp-link:tl-wr841n firmware
- CVE-2022-25072 Memory corruption in tp-link:archer a54 firmware
- CVE-2022-2507 Cross-site scripting in Octopus Server
- CVE-2022-25069 Cross-site scripting in marktext:marktext
- CVE-2022-25064 Command injection in tp-link:tl-wr840n firmware
- CVE-2022-25062 Integer overflow in tp-link:tl-wr840n firmware
- CVE-2022-25061 Command injection in tp-link:tl-wr840n firmware
- CVE-2022-25060 Command injection in tp-link:tl-wr840n firmware
- CVE-2022-25051 Memory corruption in rtl 433 project:rtl 433
- CVE-2022-25050 Memory corruption in rtl 433 project:rlt 433
- CVE-2022-2505 Memory corruption in Firefox
- CVE-2022-25048 Command injection in control-webpanel:webpanel
- CVE-2022-25047 Weak cryptography in control-webpanel:webpanel
- CVE-2022-25046 Path traversal in control-webpanel:webpanel
- CVE-2022-25045 Hardcoded credentials in home owners collection management system project:home owners collection management system
- CVE-2022-25044 Memory corruption in espruino:espruino
- CVE-2022-25041 Missing authorization in open-emr:openemr
- CVE-2022-2504 SQLi in SDD-Baro
- CVE-2022-25038 wanEditor v4.7.11 was discovered to contain a cross-site scripting (XSS) vulnerability via the video upload function.
- CVE-2022-25037 wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function
- CVE-2022-25031 Privilege escalation in rdpsoft:remote desktop commander suite agent
- CVE-2022-2503 Linux Kernel LoadPin bypass via dm-verity table reload
- CVE-2022-25028 Cross-site scripting in home owners collection management system project:home owners collection management system
- CVE-2022-25027 Auth bypass in rocketsoftware:trufusion enterprise
- CVE-2022-25026 Server-side request forgery in rocketsoftware:trufusion enterprise
- CVE-2022-25024 json2xml Uncaught Exception vulnerability
- CVE-2022-25023 Memory corruption in audio file project:audio file
- CVE-2022-25022 Cross-site scripting in htmly:htmly
- CVE-2022-25020 Cross-site scripting in pluxml:pluxml
- CVE-2022-2502 Memory corruption in RTU500 series
- CVE-2022-25018 Code injection in pluxml:pluxml
- CVE-2022-25017 Command injection in hitrontech:chita firmware
- CVE-2022-25016 File upload in home owners collection management system project:home owners collection management system
- CVE-2022-25015 Cross-site scripting in icehrm:icehrm
- CVE-2022-25014 Cross-site scripting in icehrm:icehrm
- CVE-2022-25013 Cross-site scripting in icehrm:icehrm
- CVE-2022-25012 Weak cryptography in argussurveillance:dvr
- CVE-2022-25010 Misconfiguration in stepmania:stepmania
- CVE-2022-2501 Security feature bypass in GitLab
- CVE-2022-25008 Auth bypass in totolink:ex1200t firmware
- CVE-2022-25004 SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-25003 SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-2500 Cross-site scripting in GitLab
- CVE-2022-24999 qs vulnerable to Prototype Pollution
- CVE-2022-24995 Memory corruption in tenda:ax3 firmware
- CVE-2022-24992 Path traversal in qr code generator project:qr code generator
- CVE-2022-24990 TerraMaster OS Remote Command Execution
- CVE-2022-2499 Missing authorization in GitLab
- CVE-2022-24989 Code injection in terra-master:terramaster operating system
- CVE-2022-24988 Buffer Overflow in galois_2p8
- CVE-2022-24986 Race condition in kde:kcron
- CVE-2022-24985 Auth bypass in jqueryform:jqueryform
- CVE-2022-24984 File upload in jqueryform:jqueryform
- CVE-2022-24983 Information disclosure in jqueryform:jqueryform
- CVE-2022-24982 Information disclosure in jqueryform:jqueryform
- CVE-2022-24981 Cross-site scripting in jqueryform:jqueryform
- CVE-2022-24980 SSRF in Kitodo.Presentation
- CVE-2022-2498 Business logic in GitLab
- CVE-2022-24979 Missing authorization in mittwald:varnishcache
- CVE-2022-24978 Information disclosure in zohocorp:manageengine adaudit plus
- CVE-2022-24977 Path Traversal in ImpressCMS
- CVE-2022-24976 Auth bypass in atheme:atheme
- CVE-2022-24975 Information disclosure in git-scm:git
- CVE-2022-24974 Security feature bypass in menlosecurity:email isolation
- CVE-2022-24973 Memory corruption in TL-WR940N
- CVE-2022-24972 Missing authorization in TL-WR940N
- CVE-2022-24971 Memory corruption in PDF Reader
- CVE-2022-2497 Information disclosure in GitLab
- CVE-2022-24969 bypass of CVE-2021-25640
- CVE-2022-24968 Improper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket
- CVE-2022-24967 Cross-site scripting in blackrainbow:nimbus
- CVE-2022-24963 Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions
- CVE-2022-24961 Other in portainer:portainer
- CVE-2022-24960 Use after free vulnerability in PDFTron SDK
- CVE-2022-24959 Denial of service in debian:debian linux
- CVE-2022-24958 Memory corruption in debian:debian linux
- CVE-2022-24957 Cross-site scripting in dhc-vision:eqms
- CVE-2022-24956 SQL injection in shopware:b2b suite
- CVE-2022-24955 Other in foxit:pdf editor
- CVE-2022-24954 Memory corruption in foxit:pdf editor
- CVE-2022-24953 Crypt_GPG does not prevent additional options in GPG calls
- CVE-2022-24952 Denial of service in Eternal Terminal