Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 390 of 437.
- CVE-2022-22605 Memory corruption in Xcode
- CVE-2022-22604 Memory corruption in Xcode
- CVE-2022-22603 Memory corruption in Xcode
- CVE-2022-22602 Memory corruption in Xcode
- CVE-2022-22601 Memory corruption in Xcode
- CVE-2022-22600 Security feature bypass in iOS and iPadOS
- CVE-2022-2260 GiveWP < 2.21.3 - DoS via CSRF
- CVE-2022-22599 Security feature bypass in iOS and iPadOS
- CVE-2022-22598 Information disclosure in iOS and iPadOS
- CVE-2022-22597 Memory corruption in macOS
- CVE-2022-22596 Memory corruption in iOS and iPadOS
- CVE-2022-22594 Security feature bypass in iOS and iPadOS
- CVE-2022-22593 Memory corruption in iOS and iPadOS
- CVE-2022-22592 Security feature bypass in iOS and iPadOS
- CVE-2022-22591 Memory corruption in macOS
- CVE-2022-22590 Use after free in iOS and iPadOS
- CVE-2022-2259 Missing authorization in Octopus Server
- CVE-2022-22589 Cross-site scripting in iOS and iPadOS
- CVE-2022-22588 Denial of service in iOS and iPadOS
- CVE-2022-22587 Apple Memory Corruption
- CVE-2022-22586 Memory corruption in macOS
- CVE-2022-22585 Path traversal in iOS and iPadOS
- CVE-2022-22584 Memory corruption in iOS and iPadOS
- CVE-2022-22583 Security feature bypass in macOS
- CVE-2022-22582 Path traversal in macOS
- CVE-2022-2258 Missing authorization in Octopus Server
- CVE-2022-22579 Memory corruption in iOS and iPadOS
- CVE-2022-22578 Privilege escalation in iOS and iPadOS
- CVE-2022-22577 Cross-site Scripting Vulnerability in Action Pack
- CVE-2022-22576 Auth bypass in https://github.com/curl/curl
- CVE-2022-22572 Privilege escalation in Ivanti Incapptic Connect
- CVE-2022-22571 Cross-site scripting in Ivanti Incapptic Connect
- CVE-2022-22570 Memory corruption in UniFi Door Access Reader Lite
- CVE-2022-2257 Out-of-bounds Read in vim/vim
- CVE-2022-22567 Security feature bypass in CPG BIOS
- CVE-2022-22566 Security feature bypass in CPG BIOS
- CVE-2022-22565 Missing authorization in PowerScale OneFS
- CVE-2022-22564 Weak cryptography in Unity
- CVE-2022-22563 Information disclosure in PowerScale OneFS
- CVE-2022-22562 Denial of service in PowerScale OneFS
- CVE-2022-22561 Auth bypass in PowerScale OneFS
- CVE-2022-22560 Hardcoded credentials in PowerScale OneFS
- CVE-2022-2256 Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles
- CVE-2022-22559 Weak cryptography in PowerScale OneFS
- CVE-2022-22558 Memory corruption in PowerEdge Platform
- CVE-2022-22557 Information disclosure in PowerStore
- CVE-2022-22556 Denial of service in PowerStore
- CVE-2022-22555 Command injection in PowerStore
- CVE-2022-22554 Information disclosure in DellEMC System Update - DSU
- CVE-2022-22553 Auth bypass in AppSync
- CVE-2022-22552 Other in AppSync
- CVE-2022-22551 Information disclosure in AppSync
- CVE-2022-22550 Information disclosure in PowerScale OneFS
- CVE-2022-2255 Incorrect header handling in mod-wsgi
- CVE-2022-22549 Security feature bypass in PowerScale OneFS
- CVE-2022-22547 Information disclosure in Simple Diagnostics Agent
- CVE-2022-22546 Cross-site scripting in SAP Business Objects Web Intelligence (BI Launchpad)
- CVE-2022-22545 Information disclosure in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2022-22544 Missing authorization in SAP Solution Manager (Diagnostics Root Cause Analysis Tools)
- CVE-2022-22543 Denial of service in SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel)
- CVE-2022-22542 Information disclosure in SAP S/4HANA (Supplier Factsheet and Enterprise Search for Business Partner, Supplier and Customer)
- CVE-2022-22541 Information disclosure in SAP BusinessObjects Business Intelligence Platform
- CVE-2022-22540 SQL injection in SAP NetWeaver AS ABAP (Workplace Server)
- CVE-2022-2254 Distributed Data Systems WebHMI Cross-site Scripting
- CVE-2022-22539 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-22538 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-22537 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2022-22536 SAP Multiple Products HTTP Request Smuggling
- CVE-2022-22535 Missing authorization in SAP ERP HCM (Portugal)
- CVE-2022-22534 Cross-site scripting in SAP NetWeaver (ABAP and Java application Servers)
- CVE-2022-22533 Denial of service in SAP NetWeaver Application Server Java
- CVE-2022-22532 Other in SAP NetWeaver Application Server Java
- CVE-2022-22531 File upload in SAP S/4HANA
- CVE-2022-22530 File upload in SAP S/4HANA
- CVE-2022-2253 Distributed Data Systems WebHMI OS Command Injection
- CVE-2022-22529 Cross-site scripting in SAP Enterprise Threat Detection
- CVE-2022-22528 Privilege escalation in SAP Adaptive Server Enterprise
- CVE-2022-22526 Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server
- CVE-2022-22525 Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection
- CVE-2022-22524 SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access
- CVE-2022-22523 Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass
- CVE-2022-22522 Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device
- CVE-2022-22521 Privilege Escalation in Miele Benchmark Programming Tool
- CVE-2022-22520 User enumeration vulnerability in MB connect line and Helmholz products
- CVE-2022-2252 Open Redirect in microweber/microweber
- CVE-2022-22519 Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
- CVE-2022-22518 A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.
- CVE-2022-22517 Communication Components in multiple CODESYS products vulnerable to communication channel disruption
- CVE-2022-22516 CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space.
- CVE-2022-22515 A component of the CODESYS Control runtime system allows read and write access to configuration files
- CVE-2022-22514 Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CVE-2022-22513 Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CVE-2022-22512 VARTA: Multiple devices prone to hard-coded credentials
- CVE-2022-22511 WAGO PLCs WBM vulnerable to reflected XSS
- CVE-2022-22510 CODESYS: Null Pointer Dereference in CODESYS PROFINET stack
- CVE-2022-2251 Command injection in GitLab Runner
- CVE-2022-22509 PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
- CVE-2022-22508 CODESYS V3: Improper Input Validation
- CVE-2022-22506 IBM Robotic Process Automation information disclosure
- CVE-2022-22505 Information disclosure in Robotic Process Automation