Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 374 of 437.
- CVE-2022-24424 Path traversal in AppSync
- CVE-2022-24423 Denial of service in Integrated Dell Remote Access Controller 8
- CVE-2022-24422 Auth bypass in Integrated Dell Remote Access Controller 9
- CVE-2022-24421 Memory corruption in CPG BIOS
- CVE-2022-24420 Memory corruption in CPG BIOS
- CVE-2022-2442 Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization
- CVE-2022-24419 Memory corruption in CPG BIOS
- CVE-2022-24418 Other in CPG BIOS
- CVE-2022-24417 Other in CPG BIOS
- CVE-2022-24416 Memory corruption in CPG BIOS
- CVE-2022-24415 Memory corruption in CPG BIOS
- CVE-2022-24414 Information disclosure in CloudLink
- CVE-2022-24413 Race condition in PowerScale OneFS
- CVE-2022-24412 Denial of service in PowerScale OneFS
- CVE-2022-24411 Privilege escalation in PowerScale OneFS
- CVE-2022-24410 Information disclosure in CPG BIOS
- CVE-2022-2441 ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution
- CVE-2022-24409 Weak cryptography in Dell BSAFE SSL-J
- CVE-2022-24408 Privilege escalation in SINUMERIK MC
- CVE-2022-24407 SQL injection in cyrusimap:cyrus-sasl
- CVE-2022-24406 Server-side request forgery in open-xchange:ox app suite
- CVE-2022-24405 Deserialization in open-xchange:ox app suite
- CVE-2022-24404 Ciphertext Malleability in TETRA
- CVE-2022-24403 De-anonymization attack in TETRA
- CVE-2022-24402 Intentionally weakened effective strength in TETRA TEA1
- CVE-2022-24401 Keystream recovery for arbitrary frames in TETRA
- CVE-2022-24400 DCK pinning attack in TETRA
- CVE-2022-2440 Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization
- CVE-2022-24399 Cross-site scripting in SAP Focused Run (Real User Monitoring)
- CVE-2022-24398 Information disclosure in SAP Business Objects Business Intelligence Platform
- CVE-2022-24397 Cross-site scripting in SAP NetWeaver Enterprise Portal
- CVE-2022-24396 Missing authorization in SAP Focused Run (Simple Diagnostics Agent)
- CVE-2022-24395 Cross-site scripting in SAP NetWeaver Enterprise Portal
- CVE-2022-24394 Authenticated Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-24393 Authenticated Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-24392 Authenticated Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-24391 Authenticated SQL Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-24390 Authenticated Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-2439 Deserialization in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
- CVE-2022-24389 Authenticated Privileged Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-24388 Authenticated Privileged Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-24387 File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010
- CVE-2022-24386 Stored XSS in SmarterTrack v100.0.8019.14010
- CVE-2022-24385 Information disclosure via direct object access on SmarterTrack v100.0.8019.14010
- CVE-2022-24384 Reflective XSS on SmarterTrack v100.0.8019.14010
- CVE-2022-24383 ICSA-22-090-03 Fuji Electric Alpha5
- CVE-2022-24382 Privilege escalation in Intel(R) NUCs
- CVE-2022-24381 Denial of Service (DoS)
- CVE-2022-2438 Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
- CVE-2022-24379 Privilege escalation in Intel(R) Server System M70KLP Family BIOS firmware
- CVE-2022-24378 Denial of service in Intel(R) Data Center Manager software
- CVE-2022-24377 Command Injection
- CVE-2022-24376 Command Injection
- CVE-2022-24375 Denial of Service (DoS)
- CVE-2022-24374 Cross-site scripting in a-blog cms
- CVE-2022-24373 Regular Expression Denial of Service (ReDoS)
- CVE-2022-24372 Path traversal in linksys:mr9600 firmware
- CVE-2022-24370 Memory corruption in PDF Reader
- CVE-2022-2437 Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Unauthenticated PHAR Deserialization
- CVE-2022-24369 Memory corruption in PDF Reader
- CVE-2022-24368 Use after free in PDF Reader
- CVE-2022-24367 Use after free in PDF Reader
- CVE-2022-24366 Use after free in PDF Reader
- CVE-2022-24365 Use after free in PDF Reader
- CVE-2022-24364 Use after free in PDF Reader
- CVE-2022-24363 Use after free in PDF Reader
- CVE-2022-24362 Use after free in PDF Reader
- CVE-2022-24361 Memory corruption in PDF Reader
- CVE-2022-24360 Use after free in PDF Reader
- CVE-2022-2436 Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization
- CVE-2022-24359 Use after free in PDF Reader
- CVE-2022-24358 Memory corruption in PDF Reader
- CVE-2022-24357 Use after free in PDF Reader
- CVE-2022-24356 Memory corruption in PDF Reader
- CVE-2022-24355 Memory corruption in TL-WR940N
- CVE-2022-24354 Integer overflow in AC1750
- CVE-2022-24353 Memory corruption in AC1750
- CVE-2022-24352 Memory corruption in AC1750
- CVE-2022-24351 Race condition in insyde:insydeh2o
- CVE-2022-24350 Memory corruption in insyde:insydeh2o
- CVE-2022-2435 AnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-24349 Reflected XSS in action configuration window of Zabbix Frontend
- CVE-2022-24348 Path traversal and dereference of symlinks in Argo CD
- CVE-2022-24347 Cross-site scripting in jetbrains:youtrack
- CVE-2022-24346 Code injection in jetbrains:intellij idea
- CVE-2022-24345 Code injection in jetbrains:intellij idea
- CVE-2022-24344 Cross-site scripting in jetbrains:youtrack
- CVE-2022-24343 Missing authorization in jetbrains:youtrack
- CVE-2022-24342 Cross-site request forgery in jetbrains:teamcity
- CVE-2022-24341 Auth bypass in jetbrains:teamcity
- CVE-2022-24340 XML external entity in jetbrains:teamcity
- CVE-2022-2434 String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization
- CVE-2022-24339 Cross-site scripting in jetbrains:teamcity
- CVE-2022-24338 Cross-site scripting in jetbrains:teamcity
- CVE-2022-24337 Missing authorization in jetbrains:teamcity
- CVE-2022-24336 Missing authorization in jetbrains:teamcity
- CVE-2022-24335 Race condition in jetbrains:teamcity
- CVE-2022-24334 Missing authorization in jetbrains:teamcity
- CVE-2022-24333 Server-side request forgery in jetbrains:teamcity
- CVE-2022-24332 Auth bypass in jetbrains:teamcity