Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 380 of 437.
- CVE-2022-23717 PingID Windows Login prior to 2.8 denial of service condition
- CVE-2022-23716 Information disclosure in Elastic Cloud Enterprise
- CVE-2022-23715 Information disclosure in Elastic Cloud Enterprise
- CVE-2022-23714 Privilege escalation in Endpoint Security
- CVE-2022-23713 Cross-site scripting in kibana
- CVE-2022-23712 Improper Check for Unusual or Exceptional Conditions in Elasticsearch
- CVE-2022-23711 Information disclosure in kibana
- CVE-2022-23710 Cross-site scripting in kibana
- CVE-2022-2371 YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site Scripting
- CVE-2022-23709 Missing authorization in kibana
- CVE-2022-23708 Elasticsearch privilege escalation
- CVE-2022-23707 Cross-site scripting in Kibana
- CVE-2022-23706 Cross-site scripting in HPE OneView
- CVE-2022-23705 Security feature bypass in HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays
- CVE-2022-23704 Denial of service in HPE Integrated Lights-Out 4 (iLO 4)
- CVE-2022-23703 Other in HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays
- CVE-2022-23702 Privilege escalation in HPE Superdome Flex Server; HPE Superdome Flex 280 Server
- CVE-2022-23701 Open redirect in HPE Integrated Lights-Out 4 (iLO 4)
- CVE-2022-23700 Information disclosure in HPE OneView
- CVE-2022-2370 YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
- CVE-2022-23699 Auth bypass in HPE OneView
- CVE-2022-23698 Information disclosure in HPE OneView
- CVE-2022-23697 Cross-site scripting in HPE OneView
- CVE-2022-23696 SQL injection in Aruba ClearPass Policy Manager
- CVE-2022-23695 SQL injection in Aruba ClearPass Policy Manager
- CVE-2022-23694 SQL injection in Aruba ClearPass Policy Manager
- CVE-2022-23693 SQL injection in Aruba ClearPass Policy Manager
- CVE-2022-23692 SQL injection in Aruba ClearPass Policy Manager
- CVE-2022-23691 Auth bypass in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23690 Information disclosure in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-2369 YaySMTP < 2.2.1 - Subscriber+ Logs Disclosure
- CVE-2022-23689 Other in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23688 Other in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23687 Denial of service in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23686 Other in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23685 Cross-site request forgery in Aruba ClearPass Policy Manager
- CVE-2022-23684 Privilege escalation in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23683 Command injection in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23682 Command injection in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23681 Command injection in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches
- CVE-2022-23680 Cross-site request forgery in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches;
- CVE-2022-2368 Authentication Bypass by Spoofing in microweber/microweber
- CVE-2022-23679 Cross-site request forgery in Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches;
- CVE-2022-23678 Information disclosure in Aruba Virtual Intranet Access (VIA)
- CVE-2022-23677 Memory corruption in ArubaOS-Switch Devices
- CVE-2022-23676 Memory corruption in ArubaOS-Switch Devices
- CVE-2022-23675 Cross-site scripting in Aruba ClearPass Policy Manager
- CVE-2022-23674 Cross-site scripting in Aruba ClearPass Policy Manager
- CVE-2022-23673 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23672 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23671 Information disclosure in Aruba ClearPass Policy Manager
- CVE-2022-23670 Information disclosure in Aruba ClearPass Policy Manager
- CVE-2022-2367 WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass
- CVE-2022-23669 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2022-23668 Server-side request forgery in Aruba ClearPass Policy Manager
- CVE-2022-23667 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23666 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23665 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23664 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23663 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23662 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23661 Command injection in Aruba ClearPass Policy Manager
- CVE-2022-23660 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2022-2366 Incorrect defaults can cause attackers to bypass rate limitations
- CVE-2022-23659 Cross-site scripting in Aruba ClearPass Policy Manager
- CVE-2022-23658 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2022-23657 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2022-23656 Cross-site scripting vulnerability in Zulip Server
- CVE-2022-23655 Missing server signature validation in OctoberCMS
- CVE-2022-23654 Improper write access check in Requarks/wiki
- CVE-2022-23653 B2 Command Line Tool TOCTOU application key disclosure
- CVE-2022-23652 Privilege escalation using hop-by-hop Connection header
- CVE-2022-23651 b2-sdk-python TOCTOU application key disclosure
- CVE-2022-23650 Use of Hard-coded Cryptographic Key in Netmaker
- CVE-2022-2365 Cross-site Scripting (XSS) - Stored in zadam/trilium
- CVE-2022-23649 Improper Certificate Validation in Cosign
- CVE-2022-23648 Insecure handling of image volumes in containerd CRI plugin
- CVE-2022-23647 Cross-site Scripting in Prism
- CVE-2022-23646 Improper CSP in Image Optimization API for Next.js
- CVE-2022-23645 Out-of-bounds read in swtpm
- CVE-2022-23644 Server-side request forgery in BookWyrm
- CVE-2022-23643 Side-channel attack in Sourcegraph Code Monitors
- CVE-2022-23642 Code Injection in Sourcegraph
- CVE-2022-23641 Denial of Service in Discourse
- CVE-2022-23640 Improper Restriction of XML External Entity Reference in Excel-Streaming-Reader
- CVE-2022-2364 SourceCodester Simple Parking Management System category cross site scripting
- CVE-2022-23639 Improper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils
- CVE-2022-23638 Cross-site Scripting in svg-sanitizer
- CVE-2022-23637 Stored Cross-Site-Scripting (XSS) in Markdown Editor
- CVE-2022-23636 Invalid drop of partially-initialized instances in wasmtime
- CVE-2022-23635 Unauthenticated control plane denial of service attack in Istio
- CVE-2022-23634 Information Exposure when using Puma with Rails
- CVE-2022-23633 Exposure of sensitive information in Action Pack
- CVE-2022-23632 Traefik skips the router TLS configuration when the host header is an FQDN
- CVE-2022-23631 Prototype Pollution leading to Remote Code Execution in superjson
- CVE-2022-23630 Dependency verification bypass in Gradle
- CVE-2022-2363 SourceCodester Simple Parking Management System cross site scripting
- CVE-2022-23628 Array literal misordering in github.com/open-policy-agent/opa
- CVE-2022-23627 Inadequate access verification when using proxy commands in ArchiSteamFarm
- CVE-2022-23626 Insufficient file checks in m1k1o/blog