Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 388 of 437.
- CVE-2022-22807 Other in EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)
- CVE-2022-22806 Auth bypass in SmartConnect
- CVE-2022-22805 Memory corruption in SmartConnect
- CVE-2022-22804 Cross-site scripting in EcoStruxure Power Monitoring Expert (Versions 2020 and prior)
- CVE-2022-2280 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-22798 Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control
- CVE-2022-22797 Sysaid – sysaid Open Redirect
- CVE-2022-22796 Sysaid – Sysaid System Takeover
- CVE-2022-22795 Signiant - Manager+Agents XML External Entity (XXE)
- CVE-2022-22794 Cybonet - PineApp Mail Relay Unauthenticated Sql Injection
- CVE-2022-22793 Cybonet - PineApp Mail Relay Local File Inclusion
- CVE-2022-22792 MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters
- CVE-2022-22791 SYNEL - eharmony Authenticated Blind & Stored XSS
- CVE-2022-22790 SYNEL - eharmony Directory Traversal
- CVE-2022-2279 NULL Pointer Dereference in bfabiszewski/libmobi
- CVE-2022-22789 Charactell - FormStorm Enterprise Account Take Over
- CVE-2022-22788 DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients
- CVE-2022-22787 Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings
- CVE-2022-22786 Update package downgrade in Zoom Client for Meetings for Windows
- CVE-2022-22785 Improperly constrained session cookies in Zoom Client for Meetings
- CVE-2022-22784 Improper XML Parsing in Zoom Client for Meetings
- CVE-2022-22783 Process memory exposure in Zoom on-premise Meeting services
- CVE-2022-22782 Local privilege escalation in Windows Zoom Clients
- CVE-2022-22781 Update package downgrade in Zoom Client for Meetings for MacOS
- CVE-2022-22780 Zoom Chat Susceptible to Zip Bombing
- CVE-2022-2278 Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-22779 Retained exploded messages in Keybase clients for macOS and Windows
- CVE-2022-22778 TIBCO BusinessConnect Trading Community Management Cross-Site Request Forgery Vulnerability
- CVE-2022-22777 TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability
- CVE-2022-22776 TIBCO BusinessConnect Trading Community Management Stored Cross Site Scripting Vulnerability
- CVE-2022-22775 TIBCO ActiveMatrix BPM Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2022-22774 TIBCO Managed File Transfer Command Center XXE Vulnerability
- CVE-2022-22773 TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2022-22772 TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability
- CVE-2022-22771 TIBCO JasperReports Library Directory Traversal Vulnerability
- CVE-2022-22770 TIBCO AuditSafe API Authentication vulnerability
- CVE-2022-2277 Denial of service in MicroSCADA X SYS600
- CVE-2022-22769 TIBCO EBX vulnerabilities
- CVE-2022-22767 BD Pyxis™ Products – Default Credentials
- CVE-2022-22766 BD Pyxis Products - Hardcoded Credentials
- CVE-2022-22765 BD Viper LT System - Hardcoded Credentials
- CVE-2022-22764 Memory corruption in Firefox
- CVE-2022-22763 Race condition in Firefox
- CVE-2022-22762 Other in Firefox
- CVE-2022-22761 Security feature bypass in Firefox
- CVE-2022-22760 Information disclosure in Firefox
- CVE-2022-2276 WP Edit Menu < 1.5.0 - Unauthenticated Arbitrary Post Deletion
- CVE-2022-22759 Security feature bypass in Firefox
- CVE-2022-22758 Other in Firefox
- CVE-2022-22757 Security feature bypass in Firefox
- CVE-2022-22756 Code injection in Firefox
- CVE-2022-22755 Security feature bypass in Firefox
- CVE-2022-22754 Security feature bypass in Firefox
- CVE-2022-22753 Race condition in Firefox
- CVE-2022-22752 Memory corruption in Firefox
- CVE-2022-22751 Memory corruption in Firefox
- CVE-2022-22750 Privilege escalation in Firefox
- CVE-2022-2275 WP Edit Menu <= 1.5.0 - Arbitrary Post Deletion via CSRF
- CVE-2022-22749 Security feature bypass in Firefox
- CVE-2022-22748 Security feature bypass in Firefox
- CVE-2022-22747 Denial of service in Firefox
- CVE-2022-22746 Race condition in Firefox
- CVE-2022-22745 Information disclosure in Firefox
- CVE-2022-22744 Command injection in Firefox
- CVE-2022-22743 Security feature bypass in Firefox
- CVE-2022-22742 Memory corruption in Firefox
- CVE-2022-22741 Other in Firefox
- CVE-2022-22740 Use after free in Firefox
- CVE-2022-2274 RSA implementation bug in AVX512IFMA instructions
- CVE-2022-22739 Security feature bypass in Firefox
- CVE-2022-22738 Memory corruption in Firefox
- CVE-2022-22737 Use after free in Firefox
- CVE-2022-22736 Privilege escalation in Firefox
- CVE-2022-22735 Simple Quotation <= 1.3.2 - Subscriber+ SQL injection
- CVE-2022-22734 Simple Quotation <= 1.3.2 - Quote Creation/Edition via CSRF to Stored Cross-Site Scripting
- CVE-2022-22733 Access-Token in ElasticJob UI causes password disclosure
- CVE-2022-22732 Information disclosure in EcoStruxure Power Commission
- CVE-2022-22731 Path traversal in EcoStruxure Power Commission
- CVE-2022-22730 Auth bypass in Intel(R) Edge Insights for Industrial software
- CVE-2022-2273 Simple Membership < 4.1.3 - Membership Privilege Escalation
- CVE-2022-22729 Auth bypass in CENTUM CS 3000
- CVE-2022-22728 libapreq2 multipart form parse memory corruption
- CVE-2022-22727 Other in EcoStruxure Power Monitoring Expert (Versions 2020 and prior)
- CVE-2022-22726 Path traversal in EcoStruxure Power Monitoring Expert (Versions 2020 and prior)
- CVE-2022-22725 Memory corruption in Easergy P3 (All versions prior to V30.205)
- CVE-2022-22724 Denial of service in Modicon M340 CPUs: BMXP34 (All Versions)
- CVE-2022-22723 Memory corruption in Easergy P5 (All firmware versions prior to V01.401.101)
- CVE-2022-22722 Hardcoded credentials in Easergy P5
- CVE-2022-22721 core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
- CVE-2022-22720 HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
- CVE-2022-2272 SQL injection in PACS Server
- CVE-2022-22719 mod_lua Use of uninitialized value of in r:parsebody
- CVE-2022-22718 Microsoft Windows Print Spooler Privilege Escalation
- CVE-2022-22717 Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2022-22716 Microsoft Excel Information Disclosure Vulnerability
- CVE-2022-22715 Named Pipe File System Elevation of Privilege Vulnerability
- CVE-2022-22713 Windows Hyper-V Denial of Service Vulnerability
- CVE-2022-22712 Windows Hyper-V Denial of Service Vulnerability
- CVE-2022-22711 Windows BitLocker Information Disclosure Vulnerability
- CVE-2022-22710 Windows Common Log File System Driver Denial of Service Vulnerability