Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 381 of 437.
- CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers
- CVE-2022-23624 Validation bypass in frourio-express
- CVE-2022-23623 Validation bypass in frourio
- CVE-2022-23622 Cross site scripting in registration template in xwiki-platform
- CVE-2022-23621 Missing authorization in xwiki-platform
- CVE-2022-23620 Path traversal in xwiki-platform-skin-skinx
- CVE-2022-2362 Download Manager < 3.2.50 - Bypass IP Address Blocking Restriction
- CVE-2022-23619 Information exposure in xwiki-platform
- CVE-2022-23618 Open Redirect in xwiki-platform
- CVE-2022-23617 Missing authorization in xwiki-platform
- CVE-2022-23616 Remote code execution in xwiki-platform
- CVE-2022-23615 Partial authorization bypass on document save in xwiki-platform
- CVE-2022-23614 Code injection in Twig
- CVE-2022-23613 Privilege escalation on xrdp
- CVE-2022-23612 Directory Traversal in OpenMRS Startup Filter
- CVE-2022-23611 OS command injection in iTunesRPC-Remastered
- CVE-2022-23610 Improper Verification of Cryptographic Signature in wire-server
- CVE-2022-2361 Social Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23609 Path traveresal in iTunesRPC-Remastered
- CVE-2022-23608 Use after free in PJSIP
- CVE-2022-23607 Unsafe handling of user-specified cookies in treq
- CVE-2022-23606 Crash when a cluster is deleted in Envoy
- CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp
- CVE-2022-23604 Privilege escalation in Defender
- CVE-2022-23603 Code injection in iTunesRPC-Remastered
- CVE-2022-23602 Nim's rst parser sandboxed mode allows include which can embed any local file
- CVE-2022-23601 CSRF token missing in Symfony
- CVE-2022-23600 Limited ability to spoof SAML authentication with missing audience verification
- CVE-2022-23599 Cross-site Scripting and Open Redirect in Products.ATContentTypes
- CVE-2022-23598 Reflected XSS vulnerability when rendering error messages in laminas-form
- CVE-2022-23597 Remote program execution with user interaction
- CVE-2022-23596 Infinite loop in junrar
- CVE-2022-23595 Null pointer dereference in TensorFlow
- CVE-2022-23594 Out of bounds read in Tensorflow
- CVE-2022-23593 Segfault in `simplifyBroadcast` in Tensorflow
- CVE-2022-23592 Out of bounds read in Tensorflow
- CVE-2022-23591 Stack overflow in Tensorflow
- CVE-2022-23590 Crash due to erroneous `StatusOr` in Tensorflow
- CVE-2022-23589 Null pointer dereference in Grappler's `IsConstant` in Tensorflow
- CVE-2022-23588 `CHECK`-fails due to attempting to build a reference tensor in Tensorflow
- CVE-2022-23587 Integer overflow in Tensorflow
- CVE-2022-23586 Multiple `CHECK`-fails in `function.cc` in Tensorflow
- CVE-2022-23585 Memory leak in decoding PNG images in Tensorflow
- CVE-2022-23584 Use after free in `DecodePng` in Tensorflow
- CVE-2022-23583 `CHECK`-failures in binary ops in Tensorflow
- CVE-2022-23582 `CHECK`-failures in `TensorByteSize` in Tensorflow
- CVE-2022-23581 `CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
- CVE-2022-23580 Abort caused by allocating a vector that is too large in Tensorflow
- CVE-2022-23579 `CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
- CVE-2022-23578 Memory leak in Tensorflow
- CVE-2022-23577 Null-dereference in Tensorflow
- CVE-2022-23576 Integer overflow in Tensorflow
- CVE-2022-23575 Integer overflow in Tensorflow
- CVE-2022-23574 Out of bounds read and write in Tensorflow
- CVE-2022-23573 Uninitialized variable access in Tensorflow
- CVE-2022-23572 Crash when type cannot be specialized in Tensorflow
- CVE-2022-23571 Reachable Assertion in Tensorflow
- CVE-2022-23570 Null-dereference in Tensorflow
- CVE-2022-2357 WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download
- CVE-2022-23569 `CHECK`-fails when building invalid tensor shapes in Tensorflow
- CVE-2022-23568 Integer overflows in Tensorflow
- CVE-2022-23567 Integer overflows in Tensorflow
- CVE-2022-23566 Out of bounds write in Tensorflow
- CVE-2022-23565 `CHECK`-failures in Tensorflow
- CVE-2022-23564 Reachable Assertion in Tensorflow
- CVE-2022-23563 Insecure temporary file in Tensorflow
- CVE-2022-23562 Integer overflow in Tensorflow
- CVE-2022-23561 Out of bounds write in TFLite
- CVE-2022-23560 Read and Write outside of bounds in TFLite
- CVE-2022-2356 User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
- CVE-2022-23559 Integer overflow in TFLite
- CVE-2022-23558 Integer overflow in TFLite array creation
- CVE-2022-23557 Division by zero in TFLite
- CVE-2022-23556 CodeIgniter is vulnerable to IP address spoofing when using proxy
- CVE-2022-23555 authentik vulnerable to Improper Authentication via invitation URL token reuse
- CVE-2022-23554 Authentication bypass in Alpine
- CVE-2022-23553 URL access filters bypass in Alpine
- CVE-2022-23552 Grafana stored XSS in FileUploader component
- CVE-2022-23551 AAD Pod Identity obtaining token with backslash
- CVE-2022-2355 Easy Username Updater < 1.0.5 - Arbitrary Username Update via CSRF
- CVE-2022-23549 Discourse vulnerable to bypass of post max_length using HTML comments
- CVE-2022-23548 Denial of service in discourse
- CVE-2022-23547 Heap buffer overflow in pjproject when decoding STUN message
- CVE-2022-23546 Discourse vulnerable to private topic leak via email#send_digest
- CVE-2022-23544 Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting
- CVE-2022-23543 HTML attributes when attaching a YouTube link to the post
- CVE-2022-23542 OpenFGA Authorization Bypass
- CVE-2022-23541 jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
- CVE-2022-23540 jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
- CVE-2022-2354 WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
- CVE-2022-23539 jsonwebtoken unrestricted key type could lead to legacy keys usage
- CVE-2022-23538 User credentials leaked to third-party service via HTTP redirect in scs-library-client
- CVE-2022-23537 PJSIP vulnerable to heap buffer overflow when decoding STUN message
- CVE-2022-23536 Alertmanager can expose local files content via specially crafted config
- CVE-2022-23535 LiteDB contains Deserialization of Untrusted Data
- CVE-2022-23532 neo4j-apoc-procedures is vulnerable to path traversal
- CVE-2022-23531 Arbitrary file write when scanning a specially-crafted local PyPI package
- CVE-2022-23530 GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
- CVE-2022-2353 Cross-Site Request Forgery (CSRF) in microweber/microweber
- CVE-2022-23527 Open Redirect in oidc_validate_redirect_url()