Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 372 of 437.
- CVE-2022-24660 Information disclosure in goldshell:goldshell miner firmware
- CVE-2022-2466 Quarkus does not terminate HTTP requests header context
- CVE-2022-24659 Path traversal in goldshell:goldshell miner firmware
- CVE-2022-24657 Hardcoded credentials in goldshell:goldshell miner firmware
- CVE-2022-24656 Cross-site scripting in hexoeditor project:hexoeditor
- CVE-2022-24655 Memory corruption in netgear:cax80 firmware
- CVE-2022-24654 Cross-site scripting in intelbras:ata 200 firmware
- CVE-2022-24652 File upload in sentcms:sentcms
- CVE-2022-24651 File upload in sentcms:sentcms
- CVE-2022-2465 ISaGRAF Workbench Deserialization of Untrusted Data CWE-502
- CVE-2022-24647 Path traversal in cuppacms:cuppacms
- CVE-2022-24646 SQL injection in phpgurukul:hospital management system
- CVE-2022-24644 Supply chain in zzinc:keymouse firmware
- CVE-2022-24643 Cross-site scripting in open-emr:openemr
- CVE-2022-2464 ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22
- CVE-2022-24637 Improper Privilege Management in Open Web Analytics
- CVE-2022-24633 Information disclosure in filecloud:filecloud
- CVE-2022-24632 Path traversal in audiocodes:device manager express
- CVE-2022-24631 Cross-site scripting in audiocodes:device manager express
- CVE-2022-24630 Command injection in audiocodes:device manager express
- CVE-2022-2463 ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22
- CVE-2022-24629 Path traversal in audiocodes:device manager express
- CVE-2022-24628 SQL injection in audiocodes:device manager express
- CVE-2022-24627 SQL injection in audiocodes:device manager express
- CVE-2022-24620 Cross-site scripting in piwigo:piwigo
- CVE-2022-2462 Transposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure
- CVE-2022-24618 Privilege escalation in heimdalsecurity:heimdal premium security
- CVE-2022-24615 Uncaught Exception in zip4j
- CVE-2022-24614 Allocation of Resources Without Limits or Throttling in metadata-extractor
- CVE-2022-24613 Improper Handling of Exceptional Conditions inn metadata-extractor
- CVE-2022-24612 Cross-site scripting in eyesofnetwork:eyesofnetwork
- CVE-2022-24611 Denial of service in silabs:sd3502 firmware
- CVE-2022-24610 Information disclosure in alecto:dvc-215ip firmware
- CVE-2022-2461 Transposh WordPress Translation <= 1.0.9.6 - Unauthorized Settings Change
- CVE-2022-24609 Missing authorization in luocms project:luocms
- CVE-2022-24608 Cross-site scripting in luocms project:luocms
- CVE-2022-24607 SQL injection in luocms project:luocms
- CVE-2022-24606 SQL injection in luocms project:luocms
- CVE-2022-24605 SQL injection in luocms project:luocms
- CVE-2022-24604 SQL injection in luocms project:luocms
- CVE-2022-24603 SQL injection in luocms project:luocms
- CVE-2022-24602 SQL injection in luocms project:luocms
- CVE-2022-24601 SQL injection in luocms project:luocms
- CVE-2022-24600 SQL injection in luocms project:luocms
- CVE-2022-2460 WPDating < 7.4.0 - Multiple Unauthenticated SQLi
- CVE-2022-24599 Information disclosure in audiofile:audiofile
- CVE-2022-24595 Missing authorization in automotivelinux:kooky koi
- CVE-2022-24594 Security feature bypass in waline:waline
- CVE-2022-24590 Cross-site scripting in backdropcms:backdrop
- CVE-2022-2459 Missing authorization in GitLab
- CVE-2022-24589 Cross-site scripting in burden project:burden
- CVE-2022-24588 Cross-site scripting in flatpress:flatpress
- CVE-2022-24587 Cross-site scripting in pluxml:pluxml
- CVE-2022-24586 Cross-site scripting in pluxml:pluxml
- CVE-2022-24585 Cross-site scripting in pluxml:pluxml
- CVE-2022-24584 Missing authorization in yubico:otp
- CVE-2022-24582 Cross-site scripting in accounting journal management project:accounting journal management
- CVE-2022-24581 Information disclosure in aceware:aceweb online portal
- CVE-2022-2458 XML external entity in Red Hat Process Automation Manager 7
- CVE-2022-24578 Memory corruption in gpac:gpac
- CVE-2022-24577 Null dereference in gpac:gpac
- CVE-2022-24576 Use after free in gpac:gpac
- CVE-2022-24575 Memory corruption in gpac:gpac
- CVE-2022-24574 Null dereference in gpac:gpac
- CVE-2022-24573 Cross-site scripting in element-it:http commander
- CVE-2022-24572 Cross-site scripting in car driving school management system project:car driving school management system
- CVE-2022-24571 SQL injection in car driving school management system project:car driving school management system
- CVE-2022-2457 Auth bypass in Red Hat Process Automation Manager 7
- CVE-2022-24568 Server-side request forgery in xxyopen:novel-plus
- CVE-2022-24566 Cross-site scripting in checkmk:checkmk
- CVE-2022-24565 Cross-site scripting in checkmk:checkmk
- CVE-2022-24564 Cross-site scripting in checkmk:checkmk
- CVE-2022-24563 Cross-site Scripting in GeniXCMS
- CVE-2022-24562 Auth bypass in iobit:iotransfer
- CVE-2022-2456 Missing authorization in GitLab
- CVE-2022-24553 File upload in zfaka project:zfaka
- CVE-2022-24552 Command injection in starwindsoftware:nas
- CVE-2022-24551 Auth bypass in starwindsoftware:nas
- CVE-2022-24550 Windows Telephony Server Elevation of Privilege Vulnerability
- CVE-2022-2455 Denial of service in GitLab
- CVE-2022-24549 Windows AppX Package Manager Elevation of Privilege Vulnerability
- CVE-2022-24548 Microsoft Defender Denial of Service Vulnerability
- CVE-2022-24547 Windows Digital Media Receiver Elevation of Privilege Vulnerability
- CVE-2022-24546 Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2022-24545 Windows Kerberos Remote Code Execution Vulnerability
- CVE-2022-24544 Windows Kerberos Elevation of Privilege Vulnerability
- CVE-2022-24543 Windows Upgrade Assistant Remote Code Execution Vulnerability
- CVE-2022-24542 Windows Win32k Elevation of Privilege Vulnerability
- CVE-2022-24541 Windows Server Service Remote Code Execution Vulnerability
- CVE-2022-24540 Windows ALPC Elevation of Privilege Vulnerability
- CVE-2022-2454 Integer Overflow or Wraparound in gpac/gpac
- CVE-2022-24539 Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
- CVE-2022-24538 Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
- CVE-2022-24537 Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2022-24536 Windows DNS Server Remote Code Execution Vulnerability
- CVE-2022-24534 Win32 Stream Enumeration Remote Code Execution Vulnerability
- CVE-2022-24533 Remote Desktop Protocol Remote Code Execution Vulnerability
- CVE-2022-24532 HEVC Video Extensions Remote Code Execution Vulnerability
- CVE-2022-24530 Windows Installer Elevation of Privilege Vulnerability
- CVE-2022-2453 Use After Free in gpac/gpac