Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 379 of 437.
- CVE-2022-23852 Integer overflow in debian:debian linux
- CVE-2022-23851 Code injection in netaxis:api orchestrator
- CVE-2022-23850 Memory corruption in epub2txt project:epub2txt
- CVE-2022-2385 AccessKeyID validation bypass
- CVE-2022-23849 Auth bypass in devolutions:password hub
- CVE-2022-23848 Command injection in Alluxio
- CVE-2022-2384 Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23837 Denial of service in sidekiq
- CVE-2022-23835 Information disclosure in visual voice mail project:visual voice mail
- CVE-2022-23833 Infinite Loop in Django
- CVE-2022-23831 Denial of service in AMD μProf
- CVE-2022-23830 Security feature bypass in 3rd Gen AMD EPYC™ Processors
- CVE-2022-2383 Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting
- CVE-2022-23829 Security feature bypass in 1st Gen AMD EPYC™ Processors
- CVE-2022-23826 Race condition in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2022-23825 Information disclosure in AMD Processors
- CVE-2022-23824 Information disclosure in AMD Processors
- CVE-2022-23823 Information disclosure in AMD Processors
- CVE-2022-23822 Security feature bypass in Zynq-7000 SoC FSBL
- CVE-2022-23821 Privilege escalation in AMD Ryzen™ Embedded 5000
- CVE-2022-23820 Memory corruption in 3rd Gen AMD EPYC™ Processors
- CVE-2022-2382 Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion
- CVE-2022-23818 Other in 3rd Gen AMD EPYC™
- CVE-2022-23817 Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- CVE-2022-23815 Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2022-23814 Other in 3rd Gen EPYC
- CVE-2022-23813 Security feature bypass in 2nd Gen EPYC
- CVE-2022-23812 Malicious Package
- CVE-2022-23810 Code injection in a-blog cms
- CVE-2022-2381 E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRF
- CVE-2022-23808 Cross-site Scripting in phpmyadmin
- CVE-2022-23807 Improper Authentication in phpmyadmin
- CVE-2022-23806 Weak cryptography in debian:debian linux
- CVE-2022-23805 Memory corruption in Trend Micro Worry-Free Business Security
- CVE-2022-23804 Memory corruption in KiCad
- CVE-2022-23803 Memory corruption in KiCad
- CVE-2022-23802 Extension - Insecure Permissions within Joomla Guru extensions
- CVE-2022-23801 [20220309] - Core - XSS attack vector through SVG
- CVE-2022-23800 [20220308] - Core - Inadequate content filtering within the filter code
- CVE-2022-2380 Memory corruption in Kernel
- CVE-2022-23799 [20220307] - Core - Variable Tampering on JInput $_REQUEST data
- CVE-2022-23798 [20220306] - Core - Inadequate validation of internal URLs
- CVE-2022-23797 [20220305] - Core - Inadequate filtering on the selected Ids
- CVE-2022-23796 [20220304] - Core - Missing input validation within com_fields class inputs
- CVE-2022-23795 [20220303] - Core - User row are not bound to a authentication mechanism
- CVE-2022-23794 [20220302] - Core - Path Disclosure within filesystem error messages
- CVE-2022-23793 [20220301] - Core - Zip Slip within the Tar extractor
- CVE-2022-23791 XSS in Firmanet Software and Technology Customer Relation Manager
- CVE-2022-23790 XSS in Firmanet Software and Technology Customer Relation Manager
- CVE-2022-2379 Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API
- CVE-2022-2378 Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
- CVE-2022-23779 Information disclosure in zohocorp:manageengine desktop central
- CVE-2022-23775 Missing authorization in truestack:direct connect
- CVE-2022-23774 Other in docker:docker desktop
- CVE-2022-23773 Security feature bypass in golang:go
- CVE-2022-23772 Integer overflow in debian:debian linux
- CVE-2022-23771 IPTIME NAS1DUAL CSRF Vulnerability
- CVE-2022-23770 WISA Smart Wing CMS Remote Command Execution Vulnerability
- CVE-2022-2377 Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
- CVE-2022-23769 Secuever reverseWall-MDS Remote Code Execution Vulnerability
- CVE-2022-23768 Neo Information Sys. NIS-HAP11AC remote access and manipulation vulnerability
- CVE-2022-23767 SecureGate authentication bypass vulnerability
- CVE-2022-23766 BigFileAgent arbitrary file execution vulnerability
- CVE-2022-23765 IPTIME NAS family CSRF vulnerability
- CVE-2022-23764 TERUTEN WebCube update remote code execution vulnerability
- CVE-2022-23763 DOUZONE BIZON NeoRS file download and execute vulnerability
- CVE-2022-2376 Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
- CVE-2022-2375 WP Sticky Button < 1.4.1 - Unauthenticated Arbitrary Settings Update to Stored XSS
- CVE-2022-23748 Dante Discovery Process Control
- CVE-2022-23747 Memory corruption in Sony Xperia
- CVE-2022-23746 Auth bypass in Gateway & Management, IPsec VPN blade SNX portal.
- CVE-2022-23745 Memory corruption in Checkpoint Harmony Capsule Workspace
- CVE-2022-23744 Security feature bypass in Enterprise Endpoint Security Windows Clients.
- CVE-2022-23743 Privilege escalation in ZoneAlarm.
- CVE-2022-23742 Privilege escalation in Check Point Endpoint Security Client for Windows
- CVE-2022-23741 Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access
- CVE-2022-23740 Command injection in GitHub Enterprise Server
- CVE-2022-2374 Simply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23739 Missing authorization in GitHub Enterprise Server
- CVE-2022-23738 Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files
- CVE-2022-23737 Improper Privilege Management in GitHub Enterprise Server leading to page creation and deletion
- CVE-2022-23734 Deserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution
- CVE-2022-23733 Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes
- CVE-2022-23732 Path traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections
- CVE-2022-23731 Memory corruption in LG webOS TV
- CVE-2022-23730 Security feature bypass in LG webOS TV
- CVE-2022-2373 Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure
- CVE-2022-23729 Auth bypass in LG mobile devices
- CVE-2022-23728 Security feature bypass in LG mobile devices
- CVE-2022-23727 Privilege escalation in lg:webos
- CVE-2022-23726 Information disclosure in PingCentral
- CVE-2022-23725 Misconfiguration in PingID Windows Login
- CVE-2022-23724 PingID Integration for Windows Login MFA Bypass
- CVE-2022-23723 PingFederate PingOneMFA Integration Kit MFA Bypass
- CVE-2022-23722 PingFederate Password Reset via Authentication API Mishandling
- CVE-2022-23721 PingID integration for Windows login duplicate username collision.
- CVE-2022-23720 Misconfiguration in PingID Windows Login
- CVE-2022-2372 YaySMTP < 2.2.2 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23719 Auth bypass in PingID Windows Login
- CVE-2022-23718 PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution