Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 386 of 437.
- CVE-2022-23054 Openmct XSS via the “Summary Widget”
- CVE-2022-23053 Openmct XSS via the “Condition Widget”
- CVE-2022-23052 Cross-site request forgery in PeTeReport
- CVE-2022-23051 Cross-site scripting in PeTeReport
- CVE-2022-23050 File upload in ManageEngine AppManager15
- CVE-2022-2305 WordPress Popup <= 1.9.3.8 - Admin+ Stored Cross-Site Scripting
- CVE-2022-23049 Cross-site scripting in Exponent CMS
- CVE-2022-23048 File upload in Exponent CMS
- CVE-2022-23047 Cross-site scripting in Exponent CMS
- CVE-2022-23046 SQL injection in PhpIPAM
- CVE-2022-23045 Cross-site scripting in PhpIPAM
- CVE-2022-23044 Cross-site request forgery in Tiny File Manager
- CVE-2022-23043 File upload restriction bypass in Zenario CMS
- CVE-2022-23042 Race condition in unspecified
- CVE-2022-23041 Race condition in unspecified
- CVE-2022-23040 Race condition in unspecified
- CVE-2022-2304 Stack-based Buffer Overflow in vim/vim
- CVE-2022-23039 Race condition in unspecified
- CVE-2022-23038 Race condition in unspecified
- CVE-2022-23037 Race condition in unspecified
- CVE-2022-23036 Race condition in unspecified
- CVE-2022-23035 Use after free in xen
- CVE-2022-23034 Integer overflow in xen
- CVE-2022-23033 Other in xen
- CVE-2022-23032 Security feature bypass in BIG-IP Edge Client for Mac and Windows
- CVE-2022-23031 XML external entity in BIG-IP FPS, ASM, and Advanced WAF
- CVE-2022-23030 Denial of service in BIG-IP
- CVE-2022-2303 Auth bypass in GitLab
- CVE-2022-23029 Denial of service in BIG-IP
- CVE-2022-23028 Denial of service in BIG-IP AFM
- CVE-2022-23027 Denial of service in BIG-IP
- CVE-2022-23026 Denial of service in BIG-IP ASM & Advanced WAF
- CVE-2022-23025 Null dereference in BIG-IP
- CVE-2022-23024 Denial of service in BIG-IP AFM
- CVE-2022-23023 Denial of service in BIG-IP & BIG-IQ
- CVE-2022-23022 Null dereference in BIG-IP
- CVE-2022-23021 Null dereference in BIG-IP
- CVE-2022-23020 Null dereference in BIG-IP
- CVE-2022-2302 LENZE: Missing password verification in authorisation procedure
- CVE-2022-23019 Denial of service in BIG-IP
- CVE-2022-23018 Denial of service in BIG-IP AFM
- CVE-2022-23017 Null dereference in BIG-IP
- CVE-2022-23016 Null dereference in BIG-IP
- CVE-2022-23015 Denial of service in BIG-IP
- CVE-2022-23014 Denial of service in BIG-IP APM
- CVE-2022-23013 Cross-site scripting in BIG-IP DNS & GTM
- CVE-2022-23012 Memory corruption in BIG-IP
- CVE-2022-23011 Denial of service in BIG-IP
- CVE-2022-23010 Denial of service in BIG-IP
- CVE-2022-2301 Buffer Over-read in hpjansson/chafa
- CVE-2022-23009 Missing authorization in BIG-IQ Centralized Management
- CVE-2022-23008 Cross-site scripting in NGINX Controller API Management
- CVE-2022-23006 Buffer Overflow Vulnerability in Western Digital My Cloud Home Products and SanDisk ibi
- CVE-2022-23005 Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature
- CVE-2022-23004 Algorithm incorrectly returning error and Invalid unreduced value written to output buffer
- CVE-2022-23003 Shared secret or Point multiplication of NIST P-256 points with X coordinate of zero
- CVE-2022-23002 Point Compression/Decompression of NIST P-256 points with X coordinate of zero
- CVE-2022-23001 Sweet-B Library: Point compress/decompress using the wrong bit for sign
- CVE-2022-23000 Weak Default SSL use in Port Forwarding Service
- CVE-2022-2300 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-22999 Cross-site Scripting Vulnerability in USB Backups App
- CVE-2022-22998 Protecting AWS credentials stored in plaintext on My Cloud Home
- CVE-2022-22997 Command Injection Vulnerability on My Cloud Home
- CVE-2022-22996 SanDisk Professional G-RAID 4/8 Software Utility, Privilege Escalation
- CVE-2022-22995 Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk
- CVE-2022-22994 Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.
- CVE-2022-22993 Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.
- CVE-2022-22992 Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices.
- CVE-2022-22991 Command injection through unsecured HTTP calls on Western Digital My Cloud devices
- CVE-2022-22990 Limited authentication bypass vulnerability on Western Digital My Cloud devices
- CVE-2022-2299 Allow SVG Files <= 1.1 - Author+ Stored Cross Site Scripting via SVG
- CVE-2022-22989 Pre-authenticated stack overflow vulnerability on FTP Service
- CVE-2022-22988 Insecure file and directory permissions on EdgeRover
- CVE-2022-22987 Advantech ADAM-3600
- CVE-2022-22986 Command injection in Netcommunity OG410X and OG810X series
- CVE-2022-22985 ICSA-22-062-01 IPCOMM ipDIO
- CVE-2022-22984 Command Injection
- CVE-2022-22983 Information disclosure in VMware Workstation
- CVE-2022-22982 Server-side request forgery in VMware vCenter Server
- CVE-2022-22980 SpEL Injection in Spring Data MongoDB
- CVE-2022-2298 SourceCodester Clinics Patient Management System Login Page index.php sql injection
- CVE-2022-22979 Denial of Service in Spring Cloud Function
- CVE-2022-22978 Authorization bypass in Spring Security
- CVE-2022-22977 XML external entity in VMware Tools for Windows
- CVE-2022-22976 Integer overflow in BCrypt class in Spring Security
- CVE-2022-22975 Other in Pinniped
- CVE-2022-22973 Privilege escalation in VMware Workspace ONE Access and Identity Manager.
- CVE-2022-22972 Auth bypass in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-22971 Allocation of Resources Without Limits or Throttling in Spring Framework
- CVE-2022-22970 Denial of service in Spring Framework
- CVE-2022-2297 SourceCodester Clinics Patient Management System unrestricted upload
- CVE-2022-22969 Denial of service in Spring Security OAuth2
- CVE-2022-22968 Improper handling of case sensitivity in Spring Framework
- CVE-2022-22967 Salt's PAM auth fails to reject locked accounts
- CVE-2022-22966 Other in VMware Cloud Director
- CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution
- CVE-2022-22964 Privilege escalation in VMware Horizon Agent for Linux
- CVE-2022-22963 VMware Tanzu Spring Cloud Function Remote Code Execution
- CVE-2022-22962 Privilege escalation in VMware Horizon Agent for Linux
- CVE-2022-22961 Information disclosure in VMware Workspace ONE Access, Identity Manager and vRealize Automation