Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 378 of 437.
- CVE-2022-23980 WordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerability
- CVE-2022-2398 WP Comments Fields < 4.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23979 WordPress Ultimate Reviews plugin <= 3.0.15 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-23976 Cross-site request forgery in Access Demo Importer (WordPress plugin)
- CVE-2022-23975 Cross-site request forgery in Access Demo Importer (WordPress plugin)
- CVE-2022-23974 Pinot segment push endpoint has a vulnerability in unprotected environments
- CVE-2022-23973 ASUS RT-AX56U - Stack overflew
- CVE-2022-23972 ASUS RT-AX56U - SQL Injection
- CVE-2022-23971 ASUS RT-AX56U - Path Traversal
- CVE-2022-23970 ASUS RT-AX56U - Path Traversal
- CVE-2022-23968 Denial of service in xerox:versalink firmware
- CVE-2022-23961 In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS.
- CVE-2022-23960 Information disclosure in arm:cortex-a57 firmware
- CVE-2022-2396 SourceCodester Simple e-Learning System claire_blake cross site scripting
- CVE-2022-23959 Other in debian:debian linux
- CVE-2022-23958 Denial of service in HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC
- CVE-2022-23957 Denial of service in HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC
- CVE-2022-23956 Denial of service in HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC
- CVE-2022-23955 Denial of service in HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC
- CVE-2022-23954 Denial of service in HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC
- CVE-2022-23953 Denial of service in HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC
- CVE-2022-23952 Information disclosure in keylime
- CVE-2022-23951 Denial of service in keylime
- CVE-2022-23950 Misconfiguration in keylime
- CVE-2022-2395 weForms < 1.6.14 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23949 Other in keylime
- CVE-2022-23948 Information disclosure in keylime
- CVE-2022-23947 Memory corruption in KiCad
- CVE-2022-23946 Memory corruption in KiCad
- CVE-2022-23945 Apache ShenYu missing authentication allows gateway registration
- CVE-2022-23944 Apache ShenYu 2.4.1 Improper access control
- CVE-2022-23943 mod_sed: Read/write beyond bounds
- CVE-2022-23942 Apache Doris hardcoded cryptography initialization
- CVE-2022-23940 Deserialization in salesagility:suitecrm
- CVE-2022-2394 Sensitive Parameter Exposure in Puppet Bolt prior to 3.24
- CVE-2022-23937 Memory corruption in windriver:vxworks
- CVE-2022-23935 Command injection in exiftool project:exiftool
- CVE-2022-23934 Other in HP PC BIOS
- CVE-2022-23933 Other in HP PC BIOS
- CVE-2022-23932 Other in HP PC BIOS
- CVE-2022-23931 Other in HP PC BIOS
- CVE-2022-23930 Other in HP PC BIOS
- CVE-2022-2393 Auth bypass in pki-core
- CVE-2022-23929 Other in HP PC BIOS
- CVE-2022-23928 Other in HP PC BIOS
- CVE-2022-23927 Other in HP PC BIOS
- CVE-2022-23926 Other in HP PC BIOS
- CVE-2022-23925 Other in HP PC BIOS
- CVE-2022-23924 Other in HP PC BIOS
- CVE-2022-23923 Sandbox Bypass
- CVE-2022-23922 WIN-911 2021 Incorrect Default Permissions
- CVE-2022-23921 ICSA-22-053-01 GE Proficy CIMPLICITY-IPM
- CVE-2022-2392 Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download
- CVE-2022-23919 Memory corruption in LinkHub Mesh Wifi
- CVE-2022-23918 Memory corruption in LinkHub Mesh Wifi
- CVE-2022-23916 Cross-site scripting in a-blog cms
- CVE-2022-23915 Remote Code Execution (RCE)
- CVE-2022-23913 Apache ActiveMQ Artemis DoS
- CVE-2022-23912 AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting
- CVE-2022-23911 AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection
- CVE-2022-2391 Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting
- CVE-2022-23909 Privilege escalation in gimmal:sherpa connector service
- CVE-2022-23907 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2022-23906 File upload in cmsmadesimple:cms made simple
- CVE-2022-23904 Cross-site request forgery in rainworx:auctionworx
- CVE-2022-23903 Cross-site scripting in pearadmin:pear admin think
- CVE-2022-23902 SQL injection in tongda2000:tongda office anywhere
- CVE-2022-23901 Memory corruption in re2c:re2c
- CVE-2022-23900 Command injection in wavlink:wl-wn531p3 firmware
- CVE-2022-2390 Mutable pending intent in Google Play services SDK
- CVE-2022-23899 SQL injection in net.mingsoft:ms-mcms
- CVE-2022-23898 SQL injection in net.mingsoft:ms-mcms
- CVE-2022-23896 Cross-site Scripting in admidio
- CVE-2022-2389 Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation
- CVE-2022-23889 Denial of service in yzmcms:yzmcms
- CVE-2022-23888 Cross-site request forgery in yzmcms:yzmcms
- CVE-2022-23887 Cross-site request forgery in yzmcms:yzmcms
- CVE-2022-23884 Integer overflow in minecraft:bedrock server
- CVE-2022-23882 SQL injection in tuzicms:tuzicms
- CVE-2022-23881 Code injection in zzzcms:zzzphp
- CVE-2022-23880 File upload in taogogo:taocms
- CVE-2022-2388 WP Coder < 2.5.3 - Code Deletion via CSRF
- CVE-2022-23878 Code injection in seacms:seacms
- CVE-2022-23873 SQL injection in victor cms project:victor cms
- CVE-2022-23872 Cross-site scripting in emlog:emlog
- CVE-2022-23871 Cross-site scripting in gibbonedu:gibbon
- CVE-2022-2387 Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF
- CVE-2022-23869 Missing authorization in ruoyi:ruoyi
- CVE-2022-23868 Code injection in ruoyi:ruoyi
- CVE-2022-23865 SQL injection in wecul:nyron
- CVE-2022-23863 Missing authorization in zohocorp:manageengine desktop central
- CVE-2022-23862 Missing authorization in ysoft:safeq
- CVE-2022-23861 Cross-site scripting in ysoft:safeq
- CVE-2022-2386 Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting
- CVE-2022-23858 Privilege escalation in starwindsoftware:command center
- CVE-2022-23857 SQL injection in github.com/navidrome/navidrome
- CVE-2022-23856 Information disclosure in saviynt:enterprise identity cloud
- CVE-2022-23855 Auth bypass in saviynt:enterprise identity cloud
- CVE-2022-23854 Path traversal in InTouch Access Anywhere
- CVE-2022-23853 Code injection in kde:kate