Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 385 of 437.
- CVE-2022-2316 Cross-site scripting in Devolutions Server
- CVE-2022-23159 Denial of service in PowerScale OneFS
- CVE-2022-23158 Information disclosure in Dell Wyse Device Agent
- CVE-2022-23157 Information disclosure in Dell Wyse Device Agent
- CVE-2022-23156 Auth bypass in Dell Wyse Device Agent
- CVE-2022-23155 File upload in Wyse Management Suite
- CVE-2022-2315 SQL Injection in Database Accreditation System
- CVE-2022-23144 Missing authorization in ZXvSTB
- CVE-2022-23143 Misconfiguration in OTCP
- CVE-2022-23142 Denial of service in ZXEN CG200
- CVE-2022-23141 Auth bypass in ZXMP M721
- CVE-2022-2314 VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
- CVE-2022-23139 Privilege escalation in ZXMP M721
- CVE-2022-23138 Weak cryptography in MF297D
- CVE-2022-23137 Cross-site scripting in ZXCDN
- CVE-2022-23136 Cross-site scripting in ZXHN F680
- CVE-2022-23135 Path traversal in ZXHN F677, ZXHN F477
- CVE-2022-23134 Zabbix Frontend Improper Access Control
- CVE-2022-23133 Stored XSS in host groups configuration window in Zabbix Frontend
- CVE-2022-23132 Incorrect permissions of [/var/run/zabbix] forces dac_override
- CVE-2022-23131 Zabbix Frontend Authentication Bypass
- CVE-2022-23130 Memory corruption in GENESIS32
- CVE-2022-2313 DLL high jacking in Trellix Agent
- CVE-2022-23129 Information disclosure in Mitsubishi Electric MC Works64; ICONICS GENESIS64
- CVE-2022-23128 Auth bypass in Mitsubishi Electric MC Works64; ICONICS GENESIS64; ICONICS Hyper Historian; ICONICS AnalytiX; ICONICS MobileHMI
- CVE-2022-23127 Cross-site scripting in Mitsubishi Electric MC Works64; ICONICS MobileHMI
- CVE-2022-23126 Auth bypass in teslamate:teslamate
- CVE-2022-23125 Memory corruption in Netatalk
- CVE-2022-23124 Memory corruption in Netatalk
- CVE-2022-23123 Memory corruption in Netatalk
- CVE-2022-23122 Memory corruption in Netatalk
- CVE-2022-23121 Memory corruption in Netatalk
- CVE-2022-23120 Code injection in Trend Micro Deep Security Agent for Linux
- CVE-2022-2312 Student Result or Employee Database < 1.7.5 - Stored Cross Site Scripting via CSRF
- CVE-2022-23119 Path traversal in Trend Micro Deep Security Agent for Linux
- CVE-2022-23118 Agent-to-controller security bypass in Jenkins Debian Package Builder Plugin
- CVE-2022-23117 Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows retrieving all credentials
- CVE-2022-23116 Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets
- CVE-2022-23115 CSRF vulnerability in Jenkins batch task Plugin
- CVE-2022-23114 Password stored in plain text by Jenkins Publish Over SSH Plugin
- CVE-2022-23113 Path traversal vulnerability in Jenkins Publish Over SSH Plugin
- CVE-2022-23112 Missing permission check in Jenkins Publish Over SSH Plugin
- CVE-2022-23111 CSRF vulnerability and missing permission checks in Jenkins Publish Over SSH Plugin
- CVE-2022-23110 Stored XSS vulnerability in Jenkins Publish Over SSH Plugin
- CVE-2022-2311 Find and Replace All < 1.3 - Reflected Cross Site Scripting
- CVE-2022-23109 Improper credentials masking in Jenkins HashiCorp Vault Plugin
- CVE-2022-23108 Stored XSS vulnerability in Jenkins Badge Plugin
- CVE-2022-23107 Path Traversal in Jenkins Warnings Next Generation Plugin
- CVE-2022-23106 Observable Discrepancy and Observable Timing Discrepancy in Jenkins Configuration as Code Plugin
- CVE-2022-23105 User passwords transmitted in plain text by Jenkins Active Directory Plugin
- CVE-2022-23104 WIN-911 2021 Incorrect Default Permissions
- CVE-2022-23103 Memory corruption in LinkHub Mesh Wifi
- CVE-2022-23102 Open redirect in SINEMA Remote Connect Server
- CVE-2022-23101 Cross-site scripting in open-xchange:ox app suite
- CVE-2022-23100 Command injection in open-xchange:ox app suite
- CVE-2022-2310 Skyhigh SWG Authentication bypass vulnerability
- CVE-2022-23099 Cross-site scripting in open-xchange:app suite
- CVE-2022-23098 Denial of service in debian:debian linux
- CVE-2022-23097 Memory corruption in debian:debian linux
- CVE-2022-23096 Memory corruption in debian:debian linux
- CVE-2022-23095 Memory corruption in opendesign:drawings software development kit
- CVE-2022-23094 Null dereference in debian:debian linux
- CVE-2022-23093 Stack overflow in ping(8)
- CVE-2022-23092 Missing bounds check in 9p message handling
- CVE-2022-23091 Memory disclosure by stale virtual memory mapping
- CVE-2022-23090 AIO credential reference count leak
- CVE-2022-2309 NULL Pointer Dereference in lxml/lxml
- CVE-2022-23089 Out of bound read in elf_note_prpsinfo()
- CVE-2022-23088 802.11 heap buffer overflow
- CVE-2022-23087 Bhyve e82545 device emulation out-of-bounds write
- CVE-2022-23086 mpr/mps/mpt driver ioctl heap out-of-bounds write
- CVE-2022-23085 Potential jail escape vulnerabilities in netmap
- CVE-2022-23084 Potential jail escape vulnerabilities in netmap
- CVE-2022-23083 Cross-site scripting in NetMaster Network Management for TCP/IP and NetMaster File Transfer Management
- CVE-2022-23082 CureKit - Path Traversal in isFileOutsideDir
- CVE-2022-23081 Openlibrary - Reflected XSS
- CVE-2022-23080 directus - SSRF which leads to internal port scan
- CVE-2022-2308 Information disclosure in Linux kernel
- CVE-2022-23079 motoradmin - host header Injection in the reset password functionality
- CVE-2022-23078 Habitica - Open redirect in login page
- CVE-2022-23077 Habitica - DOM XSS in login page
- CVE-2022-23074 Recipes - Stored XSS in Name Parameter
- CVE-2022-23073 Recipes - Stored XSS in Clipboard
- CVE-2022-23072 Recipes - Stored XSS in Add to Cart
- CVE-2022-23071 Recipes - SSRF on Import
- CVE-2022-2307 Business logic in GitLab
- CVE-2022-23068 ToolJet - HTML Injection in Invite New User
- CVE-2022-23067 ToolJet - Token Leakage via Referer Header
- CVE-2022-23066 Solana rBPF - Incorrect Calculation in sdiv instruction
- CVE-2022-23065 Vendure - XSS via SVG File Upload
- CVE-2022-23064 Snipe-IT - Host Header Injection
- CVE-2022-23063 Shopizer - Insufficient Session Expiration
- CVE-2022-23061 Shopizer - IDOR delete superadmin
- CVE-2022-23060 Shopizer - Stored XSS in Manage Files
- CVE-2022-2306 Insufficient Session Expiration in heroiclabs/nakama
- CVE-2022-23059 Shopizer - Stored XSS in Manage Images
- CVE-2022-23058 ERPNext - Stored XSS in My Settings
- CVE-2022-23057 ERPNext - Stored XSS in My Profile
- CVE-2022-23056 ERPNext - Stored XSS leads to account takover
- CVE-2022-23055 ERPNext - Improper user access conrol