Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 383 of 437.
- CVE-2022-23429 Memory corruption in Samsung Mobile Devices
- CVE-2022-23428 Memory corruption in Samsung Mobile Devices with Exynos chipsets
- CVE-2022-23427 Missing authorization in Samsung Mobile Devices
- CVE-2022-23426 Privilege escalation in Samsung Mobile Devices
- CVE-2022-23425 Other in Samsung Mobile Devices
- CVE-2022-2342 Cross-site Scripting (XSS) - Stored in outline/outline
- CVE-2022-23410 Code injection in AXIS IP Utility
- CVE-2022-2341 Simple Page Transition <= 1.4.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23409 Path traversal in ethercreative:logs
- CVE-2022-23408 Weak cryptography in wolfssl:wolfssl
- CVE-2022-23403 Denial of service in Intel(R) Data Center Manager software
- CVE-2022-23402 Hardcoded credentials in CENTUM VP
- CVE-2022-23401 Other in CENTUM CS 3000
- CVE-2022-23400 Memory corruption in ImageGear
- CVE-2022-2340 W-DALIL <= 2.0 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23399 Memory corruption in LinkHub Mesh Wifi
- CVE-2022-23397 Cross-site scripting in cedargate:ez-net portal
- CVE-2022-23395 Prototype Pollution in jquery.cookie
- CVE-2022-23391 Cross-site scripting in pybbs project:pybbs
- CVE-2022-23390 File upload in diyhi:bbs forum
- CVE-2022-2339 Server-Side Request Forgery (SSRF) in nocodb/nocodb
- CVE-2022-23389 Command injection in publiccms:publiccms
- CVE-2022-23387 SQL injection in taocms:taocms
- CVE-2022-23384 Cross-site request forgery in yzmcms:yzmcms
- CVE-2022-23383 Auth bypass in yzmcms:yzmcms
- CVE-2022-23382 Denial of service in hichip:shenzhen hichip vision technology firmware
- CVE-2022-23380 SQL injection in taogogo:taocms
- CVE-2022-2338 Softing Secure Integration Server Cleartext Transmission of Sensitive Information
- CVE-2022-23379 SQL injection in emlog:emlog
- CVE-2022-23378 Cross-site scripting in tastyigniter:tastyigniter
- CVE-2022-23377 Path traversal in keep:archeevo
- CVE-2022-23376 Cross-site scripting in wikidocs:wikidocs
- CVE-2022-23375 File upload in wikidocs:wikidocs
- CVE-2022-2337 Softing Secure Integration Server NULL Pointer Dereference
- CVE-2022-23367 Cross-site scripting in fulusso project:fulusso
- CVE-2022-23366 SQL injection in hms project:hms
- CVE-2022-23365 SQL injection in hms project:hms
- CVE-2022-23364 SQL injection in hms project:hms
- CVE-2022-23363 SQL injection in online banking system project:online banking system
- CVE-2022-2336 Softing Secure Integration Server Improper Authentication
- CVE-2022-23358 SQL injection in easycms:easycms
- CVE-2022-23357 Path traversal in mozilo:mozilocms
- CVE-2022-23352 Denial of service in bigantsoft:bigant server
- CVE-2022-23350 Cross-site scripting in bigantsoft:bigant server
- CVE-2022-2335 Softing Secure Integration Server Integer Underflow
- CVE-2022-23349 Cross-site request forgery in bigantsoft:bigant server
- CVE-2022-23348 Weak cryptography in bigantsoft:bigant server
- CVE-2022-23347 Path traversal in bigantsoft:bigant server
- CVE-2022-23346 Missing authorization in bigantsoft:bigant server
- CVE-2022-23345 Missing authorization in bigantsoft:bigant server
- CVE-2022-23342 Information disclosure in hyland:onbase
- CVE-2022-23340 Joplin Vulnerable to Code Injection
- CVE-2022-2334 Softing Secure Integration Server Uncontrolled Search Path Element
- CVE-2022-23337 SQL injection in dedecms:dedecms
- CVE-2022-23336 SQL injection in s-cms:s-cms
- CVE-2022-23335 SQL injection in metinfo:metinfo
- CVE-2022-23334 Security feature bypass in ip-label:newtest
- CVE-2022-23332 Command injection in ejointech:acom508 firmware
- CVE-2022-23331 Missing authorization in dataease:dataease
- CVE-2022-23330 Code injection in jpress:jpress
- CVE-2022-2333 Honeywell SoftMaster Uncontrolled Search Path Element
- CVE-2022-23329 Code injection in ujcms:jspxcms
- CVE-2022-23328 Denial of Service in Go-Ethereum
- CVE-2022-23327 Denial of Service in Go-Ethereum
- CVE-2022-23321 Cross-site scripting in xerox:xmpie ustore
- CVE-2022-23320 Hardcoded credentials in xerox:xmpie ustore
- CVE-2022-2332 Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource
- CVE-2022-23319 Memory corruption in pcf2bdf project:pcf2bdf
- CVE-2022-23318 Memory corruption in pcf2bdf project:pcf2bdf
- CVE-2022-23317 Auth bypass in helpsystems:cobalt strike
- CVE-2022-23316 Path traversal in taogogo:taocms
- CVE-2022-23315 Arbitrary file upload in Mingsoft MCMS
- CVE-2022-23314 SQL injection in mingsoft:mcms
- CVE-2022-23312 Cross-site scripting in Spectrum Power 4
- CVE-2022-23308 Use after free in apple:ipados
- CVE-2022-23307 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.
- CVE-2022-23305 SQL injection in JDBC Appender in Apache Log4j V1
- CVE-2022-23304 Information disclosure in fedoraproject:fedora
- CVE-2022-23303 Information disclosure in fedoraproject:fedora
- CVE-2022-23302 Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
- CVE-2022-23301 HEVC Video Extensions Remote Code Execution Vulnerability
- CVE-2022-23300 Raw Image Extension Remote Code Execution Vulnerability
- CVE-2022-2330 XXE vulnerability in DLP Endpoint for Windows
- CVE-2022-23299 Windows PDEV Elevation of Privilege Vulnerability
- CVE-2022-23298 Windows NT OS Kernel Elevation of Privilege Vulnerability
- CVE-2022-23297 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
- CVE-2022-23296 Windows Installer Elevation of Privilege Vulnerability
- CVE-2022-23295 Raw Image Extension Remote Code Execution Vulnerability
- CVE-2022-23294 Windows Event Tracing Remote Code Execution Vulnerability
- CVE-2022-23293 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- CVE-2022-23292 Microsoft Power BI Spoofing Vulnerability
- CVE-2022-23291 Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2022-23290 Windows Inking COM Elevation of Privilege Vulnerability
- CVE-2022-2329 Integer overflow in IGSS Data Server (IGSSdataServer.exe)
- CVE-2022-23288 Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2022-23287 Windows ALPC Elevation of Privilege Vulnerability
- CVE-2022-23286 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2022-23285 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2022-23284 Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2022-23283 Windows ALPC Elevation of Privilege Vulnerability