Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 375 of 437.
- CVE-2022-24331 Auth bypass in jetbrains:teamcity
- CVE-2022-24330 Open redirect in jetbrains:teamcity
- CVE-2022-2433 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization
- CVE-2022-24329 Improper Locking in JetBrains Kotlin
- CVE-2022-24328 Denial of service in jetbrains:hub
- CVE-2022-24327 Misconfiguration in jetbrains:hub
- CVE-2022-24324 Memory corruption in IGSS Data Server (IGSSdataServer.exe)
- CVE-2022-24323 Denial of service in EcoStruxure Control Expert
- CVE-2022-24322 Memory corruption in EcoStruxure Control Expert
- CVE-2022-24321 Denial of service in ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
- CVE-2022-24320 Weak cryptography in ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
- CVE-2022-2432 Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update
- CVE-2022-24319 Security feature bypass in ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
- CVE-2022-24318 Weak cryptography in ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
- CVE-2022-24317 Missing authorization in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CVE-2022-24316 Information disclosure in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CVE-2022-24315 Memory corruption in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CVE-2022-24314 Memory corruption in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CVE-2022-24313 Memory corruption in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CVE-2022-24312 Path traversal in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CVE-2022-24311 Path traversal in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CVE-2022-24310 Integer overflow in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CVE-2022-2431 Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion
- CVE-2022-24309 Missing authorization in Mendix Runtime V7
- CVE-2022-24308 Information disclosure in automox:automox
- CVE-2022-24307 Missing authorization in joinmastodon:mastodon
- CVE-2022-24306 Missing authorization in zohocorp:manageengine sharepoint manager plus
- CVE-2022-24305 Information disclosure in zohocorp:manageengine sharepoint manager plus
- CVE-2022-24303 Path traversal in Pillow
- CVE-2022-24302 Race Condition in Paramiko
- CVE-2022-24301 Missing authorization in debian:debian linux
- CVE-2022-24300 Other in debian:debian linux
- CVE-2022-2430 Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block'
- CVE-2022-24299 Command injection in pfSense CE and pfSense Plus
- CVE-2022-24298 Denial of Service (DoS)
- CVE-2022-24297 Memory corruption in Intel(R) NUCs
- CVE-2022-24296 Weak cryptography in Air Conditioning System G-150AD; Air Conditioning System AG-150A-A; Air Conditioning System AG-150A-J; Air Conditioning System GB-50AD; Air Conditioning System GB-50ADA-A; Air Conditioning System GB-50ADA-J; Air Conditioning System EB-50GU-A; Air Conditioning System EB-50GU-J; Air Conditioning System AE-200J; Air Conditioning System AE-200A; Air Conditioning System AE-200E; Air Conditioning System AE-50J; Air Conditioning System AE-50A; Air Conditioning System AE-50E; Air Conditioning System EW-50J; Air Conditioning System EW-50A; Air Conditioning System EW-50E; Air Conditioning System TE-200A; Air Conditioning System TE-50A; Air Conditioning System TW-50A
- CVE-2022-24295 Command injection in Okta Advanced Server Access Client
- CVE-2022-24294 ReDoS in Apache MXNet RTC Module
- CVE-2022-24293 Other in HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Officejet Printers
- CVE-2022-24292 Other in HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Officejet Printers
- CVE-2022-24291 Other in HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Officejet Printers
- CVE-2022-24290 Memory corruption in Teamcenter V12.4
- CVE-2022-2429 Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection
- CVE-2022-24289 Deserialization of untrusted data in the Hessian Component of Apache Cayenne 4.1 with older Java versions
- CVE-2022-24288 Apache Airflow: RCE in example DAGs
- CVE-2022-24287 Security feature bypass in SIMATIC PCS 7 V8.2
- CVE-2022-24286 Privilege escalation in acer:quickaccess
- CVE-2022-24285 Privilege escalation in acer:care center
- CVE-2022-24282 Deserialization in SINEC NMS
- CVE-2022-24281 SQL injection in SINEC NMS
- CVE-2022-24280 Apache Pulsar Proxy target broker address isn't validated
- CVE-2022-2428 Cross-site scripting in GitLab
- CVE-2022-24279 Prototype Pollution
- CVE-2022-24278 Directory Traversal
- CVE-2022-24272 MongoDB Server (mongod) may crash in response to unexpected requests
- CVE-2022-24266 SQL injection in cuppacms:cuppacms
- CVE-2022-24265 SQL injection in cuppacms:cuppacms
- CVE-2022-24264 SQL injection in cuppacms:cuppacms
- CVE-2022-24263 SQL injection in phpgurukul:hospital management system
- CVE-2022-24262 File upload in voipmonitor:voipmonitor
- CVE-2022-24260 SQL injection in voipmonitor:voipmonitor
- CVE-2022-2426 Thinkific Uploader <= 1.0.0 - Admin+ Stored Cross-Site Scripting
- CVE-2022-24259 Auth bypass in voipmonitor:voipmonitor
- CVE-2022-24255 Hardcoded credentials in extensis:portfolio
- CVE-2022-24254 File upload in extensis:portfolio
- CVE-2022-24253 File upload in extensis:portfolio
- CVE-2022-24252 File upload in extensis:portfolio
- CVE-2022-24251 File upload in extensis:portfolio
- CVE-2022-2425 WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-24249 Null dereference in gpac:gpac
- CVE-2022-24248 Path traversal in ritecms:ritecms
- CVE-2022-24247 Path traversal in ritecms:ritecms
- CVE-2022-24241 Path traversal in aceware:aceweb online portal
- CVE-2022-24240 SQL injection in aceware:aceweb online portal
- CVE-2022-2424 Google Maps Anywhere <= 1.2.6.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-24239 File upload in aceware:aceweb online portal
- CVE-2022-24238 Cross-site scripting in aceware:aceweb online portal
- CVE-2022-24237 Command injection in snapt:aria
- CVE-2022-24236 Missing authorization in snapt:aria
- CVE-2022-24235 Cross-site request forgery in snapt:aria
- CVE-2022-24232 Path traversal in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-24231 SQL injection in simple student information system project:simple student information system
- CVE-2022-2423 DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site Scripting
- CVE-2022-24229 Cross-site scripting in onlyoffice:document server
- CVE-2022-24227 Cross-site scripting in boltwire:boltwire
- CVE-2022-24226 SQL injection in phpgurukul:hospital management system
- CVE-2022-24223 SQL injection in thedigitalcraft:atomcms
- CVE-2022-24222 SQL injection in elitecms:elite cms
- CVE-2022-24221 SQL injection in elitecms:elite cms
- CVE-2022-24220 SQL injection in elitecms:elite cms
- CVE-2022-2422 Feathers - SQL injection via attribute aliases
- CVE-2022-24219 SQL injection in elitecms:elite cms
- CVE-2022-24218 Path traversal in elitecms:elite cms
- CVE-2022-2421 Socket.io - Improper type validation in attachment parsing
- CVE-2022-24206 SQL injection in tongda2000:tongda office anywhere
- CVE-2022-2420 URVE Web Manager uploader.php unrestricted upload
- CVE-2022-24198 Out-of-bounds Read in iText
- CVE-2022-24197 Out-of-bounds Write in iText
- CVE-2022-24196 Allocation of Resources Without Limits or Throttling in iText