Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 382 of 437.
- CVE-2022-23526 Helm contains Denial of service through schema file
- CVE-2022-23525 Helm vulnerable to Denial of service via NULL Pointer Dereference
- CVE-2022-23524 Helm vulnerable to Denial of service through string value parsing
- CVE-2022-23523 rust-vmm linux-loader vulnerable to Out-of-bounds Read
- CVE-2022-23522 Arbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdb
- CVE-2022-23521 gitattributes parsing integer overflow in git
- CVE-2022-23520 rails-html-sanitizer contains an incomplete fix for an XSS vulnerability
- CVE-2022-2352 Post SMTP < 2.1.7 - Admin+ Blind SSRF
- CVE-2022-23519 Possible XSS vulnerability with certain configurations of rails-html-sanitizer
- CVE-2022-23518 Improper neutralization of data URIs allows XSS in rails-html-sanitizer
- CVE-2022-23517 Inefficient Regular Expression Complexity in rails-html-sanitizer
- CVE-2022-23516 Uncontrolled Recursion in Loofah
- CVE-2022-23515 Improper neutralization of data URIs may allow XSS in Loofah
- CVE-2022-23514 Inefficient Regular Expression Complexity in Loofah
- CVE-2022-23513 Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint
- CVE-2022-23512 Metersphere is vulnerable to Path Injection.
- CVE-2022-23511 Amazon CloudWatch Agent for Windows has Privilege Escalation Vector
- CVE-2022-23510 SQl injection in cube-js
- CVE-2022-2351 Post SMTP < 2.1.4 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23509 Weave Gitops Run vulnerable to insecure communication
- CVE-2022-23508 GitOps Run allows for Kubernetes workload injection
- CVE-2022-23507 Light client verification not taking into account chain ID
- CVE-2022-23506 Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds
- CVE-2022-23505 Passport-wsfed-saml2 vulnerable to Authentication Bypass for WSFed authentication
- CVE-2022-23504 TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
- CVE-2022-23503 TYPO3 vulnerable to Arbitrary Code Execution via Form Framework
- CVE-2022-23502 TYPO3 contains Insufficient Session Expiration after Password Reset
- CVE-2022-23501 TYPO3 vulnerable to Improper Authentication in Frontend Login
- CVE-2022-23500 TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service
- CVE-2022-2350 Disable User Login <= 1.0.1 - Unauthenticated Settings Update
- CVE-2022-23499 Cross-Site Scripting Protection bypass in HTML Sanitizer
- CVE-2022-23498 When query caching is enabled in Grafana users can query another users session
- CVE-2022-23497 Insecure file access in FreshRSS
- CVE-2022-23496 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa
- CVE-2022-23495 ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag
- CVE-2022-23494 Cross-site scripting vulnerability in TinyMCE alerts
- CVE-2022-23493 Out of Bound Read in xrdp
- CVE-2022-23492 go-libp2p denial of service vulnerability from lack of resource management
- CVE-2022-23491 Removal of TrustCor root certificate
- CVE-2022-23490 Improper access control to polling votes
- CVE-2022-23488 BigBlueButton vulnerable to Insertion of Sensitive Information Into Sent Data
- CVE-2022-23487 libp2p denial of service vulnerability from lack of resource management
- CVE-2022-23486 libp2p-rust denial of service vulnerability from lack of resource management
- CVE-2022-23485 Invite code reuse via cookie manipulation in sentry
- CVE-2022-23484 Integer Overflow in xrdp
- CVE-2022-23483 Out-of-Bound Read in libxrdp
- CVE-2022-23482 Out-of-Bound Read in xrdp
- CVE-2022-23481 Out-of-Bound Read in xrdp
- CVE-2022-23480 Buffer Overflow in xrdp
- CVE-2022-23479 Buffer Overflow occurs in xrdp
- CVE-2022-23478 Out of Bound Write in xrdp
- CVE-2022-23477 Buffer Overflow in xrdp
- CVE-2022-23476 Unchecked return value from xmlTextReaderExpand in Nokogiri
- CVE-2022-23475 dalorRadius full account take over
- CVE-2022-23474 editor.js contains Code Injection
- CVE-2022-23473 Tuleap MediaWiki standalone "readers" can also edit pages
- CVE-2022-23472 Use of insecure random number generator in Passeo
- CVE-2022-23471 containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak
- CVE-2022-23470 Arbitrary file access in the Galaxy data analysis platform
- CVE-2022-2347 Unchecked Download size in Uboot
- CVE-2022-23469 Authorization header displayed in the debug logs
- CVE-2022-23468 Buffer Overflow in xrdp
- CVE-2022-23467 Out of Bounds Read in OpenRazer Driver
- CVE-2022-23466 DOM-based cross-site scripting (XSS) in teler dashboard
- CVE-2022-23465 SwiftTerm vulnerable to arbitrary command execution
- CVE-2022-23464 Potential Server Side Request Forgery (SSRF) in Nepxion Discovery
- CVE-2022-23463 SpEL Injection in Nepxion Discovery
- CVE-2022-23462 Stack Buffer Overflow in iowow
- CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor
- CVE-2022-23460 Stack overflow in Jsonxx
- CVE-2022-2346 Missing authorization in Octopus Server
- CVE-2022-23459 Double free or Use after Free in Value class of Jsonxx
- CVE-2022-23458 Toast UI Grid vulnerable to Cross-site scripting
- CVE-2022-23457 Path Traversal in ESAPI
- CVE-2022-23456 Other in hp:support assistant
- CVE-2022-23455 Privilege escalation in HP Support Assistant
- CVE-2022-23454 Misconfiguration in HP Support Assistant
- CVE-2022-23453 Misconfiguration in HP Support Assistant
- CVE-2022-23452 openstack-barbican Denial of Service vulnerability
- CVE-2022-23451 Barbican authorization flaw before v14.0.0
- CVE-2022-23450 Deserialization in SIMATIC Energy Manager Basic
- CVE-2022-2345 Use After Free in vim/vim
- CVE-2022-23449 Privilege escalation in SIMATIC Energy Manager Basic
- CVE-2022-23448 Misconfiguration in SIMATIC Energy Manager Basic
- CVE-2022-23447 Path traversal in FortiExtender
- CVE-2022-23446 Denial of service in Fortinet FortiEDR
- CVE-2022-23443 Missing authorization in Fortinet FortiSOAR
- CVE-2022-23442 Missing authorization in Fortinet FortiOS
- CVE-2022-23441 Hardcoded credentials in Fortinet FortiEDR
- CVE-2022-23440 Hardcoded credentials in Fortinet FortiEDR
- CVE-2022-2344 Heap-based Buffer Overflow in vim/vim
- CVE-2022-23439 Other in FortiADC
- CVE-2022-23438 Cross-site scripting in Fortinet FortiOS
- CVE-2022-23437 Infinite loop within Apache XercesJ xml parser
- CVE-2022-23435 android-gif-drawable vulerable to denial of service due to unrestricted comment length
- CVE-2022-23434 Privilege escalation in Bixby Vision
- CVE-2022-23433 Missing authorization in Reminder
- CVE-2022-23432 Memory corruption in Samsung Mobile Devices with Exynos chipsets
- CVE-2022-23431 Memory corruption in Samsung Mobile Devices with Exynos chipsets
- CVE-2022-2343 Heap-based Buffer Overflow in vim/vim