Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 387 of 437.
- CVE-2022-22960 VMware Multiple Products Privilege Escalation
- CVE-2022-2296 Use after free in Chrome
- CVE-2022-22959 Cross-site request forgery in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2022-22958 Deserialization in VMware Workspace ONE Access, Identity Manager and vRealize Automation.
- CVE-2022-22957 Deserialization in VMware Workspace ONE Access, Identity Manager and vRealize Automation.
- CVE-2022-22956 Auth bypass in VMware Workspace ONE Access
- CVE-2022-22955 Auth bypass in VMware Workspace ONE Access
- CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection
- CVE-2022-22953 Information disclosure in VMware HCX
- CVE-2022-22952 File upload in VMware Carbon Black App Control (AppC)
- CVE-2022-22951 Command injection in VMware Carbon Black App Control (AppC)
- CVE-2022-22950 Allocation of Resources Without Limits or Throttling in Spring Framework
- CVE-2022-2295 Memory corruption in Chrome
- CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability
- CVE-2022-22947 VMware Spring Cloud Gateway Code Injection
- CVE-2022-22946 Security feature bypass in Spring Cloud Gateway
- CVE-2022-22945 Command injection in VMware NSX Edge
- CVE-2022-22944 Cross-site scripting in VMware Workspace ONE Boxer
- CVE-2022-22943 Privilege escalation in VMware Tools for Windows
- CVE-2022-22942 Use after free in Photon OS
- CVE-2022-22941 SaltStack Salt Permissions Bypass
- CVE-2022-2294 WebRTC Heap Buffer Overflow
- CVE-2022-22939 Information disclosure in VMware Cloud Foundation
- CVE-2022-22938 Denial of service in vmware:horizon
- CVE-2022-22936 SaltStack Salt Authentication Bypass by Capture-replay
- CVE-2022-22935 SaltStack Salt Improper Authentication via Man in the Middle Attack
- CVE-2022-22934 SaltStack Improper Verification of Cryptographic Signature
- CVE-2022-22932 Path traversal flaws
- CVE-2022-22931 Path traversal in Apache James 3.6.1
- CVE-2022-22930 RCE in Mingsoft MCMS
- CVE-2022-2293 SourceCodester Simple Sales Management System create cross site scripting
- CVE-2022-22929 Arbitrary File Upload in Mingsoft MCMS
- CVE-2022-22928 Hardcoded credentials in mingsoft:mcms
- CVE-2022-22922 Weak cryptography in tp-link:tl-wa850re firmware
- CVE-2022-2292 SourceCodester Hotel Management System Room Edit Page 1 cross site scripting
- CVE-2022-22919 Open redirect in adenza:axiomsl controllerview
- CVE-2022-22916 Code injection in zoneland:o2oa
- CVE-2022-22914 Path traversal in ovidentia:ovidentia
- CVE-2022-22912 Prototype pollution in Plist before 3.0.5 can cause denial of service
- CVE-2022-2291 SourceCodester Hotel Management System Search search cross site scripting
- CVE-2022-22909 Code injection in digitaldruid:hoteldruid
- CVE-2022-22908 Information disclosure in sangfor:vdi client
- CVE-2022-22901 Denial of service in jerryscript:jerryscript
- CVE-2022-2290 Cross-site Scripting (XSS) - Reflected in zadam/trilium
- CVE-2022-22899 Memory corruption in coreftp:core ftp
- CVE-2022-22897 SQL injection in apollotheme:ap pagebuilder
- CVE-2022-22895 Memory corruption in jerryscript:jerryscript
- CVE-2022-22894 Memory corruption in jerryscript:jerryscript
- CVE-2022-22893 Memory corruption in jerryscript:jerryscript
- CVE-2022-22892 Denial of service in jerryscript:jerryscript
- CVE-2022-22891 Null dereference in jerryscript:jerryscript
- CVE-2022-22890 Denial of service in jerryscript:jerryscript
- CVE-2022-2289 Use After Free in vim/vim
- CVE-2022-22888 Memory corruption in jerryscript:jerryscript
- CVE-2022-22885 Improper Certificate Validation in Hutool
- CVE-2022-22881 SQL Injection in Jeecg-boot
- CVE-2022-22880 SQL Injection in Jeecg-boot
- CVE-2022-2288 Out-of-bounds Write in vim/vim
- CVE-2022-2287 Out-of-bounds Read in vim/vim
- CVE-2022-22868 Cross-site scripting in gibbonedu:gibbon
- CVE-2022-2286 Out-of-bounds Read in vim/vim
- CVE-2022-22854 Missing authorization in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-22853 Cross-site scripting in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-22852 Cross-site scripting in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-22851 Cross-site scripting in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-22850 Cross-site scripting in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-2285 Integer Overflow or Wraparound in vim/vim
- CVE-2022-22847 Path traversal in formpipe:lasernet
- CVE-2022-22846 dnslib has DNS reply verification issue
- CVE-2022-22845 Hardcoded credentials in qxip:homer webapp
- CVE-2022-22844 Memory corruption in debian:debian linux
- CVE-2022-2284 Heap-based Buffer Overflow in vim/vim
- CVE-2022-22836 Path traversal in coreftp:core ftp
- CVE-2022-22835 XML external entity in overit:geocall
- CVE-2022-22834 Code injection in overit:geocall
- CVE-2022-22833 Information disclosure in servisnet:tessa
- CVE-2022-22832 Missing authorization in servisnet:tessa
- CVE-2022-22831 Auth bypass in servisnet:tessa
- CVE-2022-22828 Missing authorization in synametrics:synaman
- CVE-2022-22827 Integer overflow in debian:debian linux
- CVE-2022-22826 Integer overflow in debian:debian linux
- CVE-2022-22825 Integer overflow in debian:debian linux
- CVE-2022-22824 Integer overflow in debian:debian linux
- CVE-2022-22823 Integer overflow in debian:debian linux
- CVE-2022-22822 Integer overflow in debian:debian linux
- CVE-2022-22821 Path Traversal in nemo-toolkit
- CVE-2022-22820 Denial of service in LINE for Windows
- CVE-2022-22819 Memory corruption in nxp:lpc55s66jbd100 firmware
- CVE-2022-22818 Cross-site Scripting in Django
- CVE-2022-22817 Arbitrary expression injection in Pillow
- CVE-2022-22816 Out-of-bounds Read in Pillow
- CVE-2022-22815 Improper Initialization in Pillow
- CVE-2022-22814 Privilege escalation in asus:myasus
- CVE-2022-22813 Hardcoded credentials in Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions)
- CVE-2022-22812 Cross-site scripting in spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
- CVE-2022-22811 Cross-site request forgery in spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
- CVE-2022-22810 Auth bypass in spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
- CVE-2022-2281 Information disclosure in GitLab
- CVE-2022-22809 Missing authorization in spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
- CVE-2022-22808 Cross-site request forgery in EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)