Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 392 of 437.
- CVE-2022-22370 Cross-site scripting in Security Verify Access
- CVE-2022-2237 keycloak-connect contains Open redirect vulnerability in the Node.js adapter
- CVE-2022-22369 Other in Workload Scheduler
- CVE-2022-22368 Weak cryptography in Spectrum Scale
- CVE-2022-22367 Information disclosure in UrbanCode Deploy
- CVE-2022-22366 Information disclosure in UrbanCode Deploy
- CVE-2022-22365 Security feature bypass in WebSphere Application Server
- CVE-2022-22364 IBM Cognos Controller security bypass
- CVE-2022-22363 IBM Cognos Controller information disclosure
- CVE-2022-22361 Cross-site request forgery in Business Automation Workflow
- CVE-2022-22360 Other in Sterling Partner Engagement Manager
- CVE-2022-22359 Cross-site request forgery in Sterling Partner Engagement Manager
- CVE-2022-22358 XML external entity in Sterling Partner Engagement Manager
- CVE-2022-22356 Information disclosure in MQ Appliance
- CVE-2022-22355 Denial of service in MQ Appliance
- CVE-2022-22354 Denial of service in Spectrum Copy Data Management
- CVE-2022-22353 Security feature bypass in Big SQL on Cloud Pak for Data
- CVE-2022-22352 IBM Sterling B2B Integrator Standard Edition cross-site scripting
- CVE-2022-22351 Denial of service in AIX
- CVE-2022-22350 Denial of service in AIX
- CVE-2022-2235 Cross-site scripting in GitLab
- CVE-2022-22349 Path traversal in Sterling External Authentication Server
- CVE-2022-22348 Other in Spectrum Protect Operations Center
- CVE-2022-22346 Cross-site request forgery in Spectrum Protect Operations Center
- CVE-2022-22345 Cross-site scripting in QRadar SIEM
- CVE-2022-22344 Other in Spectrum Copy Data Management
- CVE-2022-2234 mySCADA myPRO Command Injection
- CVE-2022-22339 Server-side request forgery in Planning Analytics
- CVE-2022-22338 IBM Sterling B2B Integrator Standard Edition SQL injection
- CVE-2022-22337 IBM Sterling B2B Integrator Standard Edition information disclosure
- CVE-2022-22336 Denial of service in Sterling Secure Proxy
- CVE-2022-22334 Missing authorization in Robotic Process Automation
- CVE-2022-22333 Memory corruption in Sterling Secure Proxy
- CVE-2022-22332 Auth bypass in Sterling Partner Engagement Manager
- CVE-2022-22331 Missing authorization in SterlingPartner Engagement Manager
- CVE-2022-22330 Misconfiguration in Control Desk
- CVE-2022-2233 Banner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-22329 Information disclosure in Control Desk
- CVE-2022-22328 Privilege escalation in SterlingPartner Engagement Manager
- CVE-2022-22327 Weak cryptography in UrbanCode Deploy
- CVE-2022-22326 Missing authorization in DataPower Gateway
- CVE-2022-22325 Information disclosure in MQ for HPE NonStop
- CVE-2022-22323 Memory corruption in Security Verify Password Synchronization Plug-in for Windows AD
- CVE-2022-22322 Cross-site scripting in InfoSphere Information Server
- CVE-2022-22321 Weak cryptography in MQ Appliance
- CVE-2022-22320 Cross-site scripting in QRadar SIEM
- CVE-2022-2232 Keycloak: ldap injection on username input
- CVE-2022-22319 Missing authorization in Robotic Process Automation
- CVE-2022-22318 Auth bypass in Curam Social Program Management
- CVE-2022-22317 Auth bypass in Curam Social Program Management
- CVE-2022-22316 Missing authorization in MQ Appliance
- CVE-2022-22315 Privilege escalation in UrbanCode Deploy
- CVE-2022-22314 Information disclosure in Planning Analytics Workspace
- CVE-2022-22313 IBM QRadar Data Synchronization App information disclosure
- CVE-2022-22312 Memory corruption in Security Verify Password Synchronization Plug-in for Windows AD
- CVE-2022-22311 Auth bypass in Security Verify Access
- CVE-2022-22310 Security feature bypass in WebSphere Application Server Liberty
- CVE-2022-2231 NULL Pointer Dereference in vim/vim
- CVE-2022-22309 Auth bypass in Power System S922 Server
- CVE-2022-22308 Code injection in Planning Analytics
- CVE-2022-22307 IBM Security Guardium privilege escalation
- CVE-2022-22306 Security feature bypass in Fortinet FortiOS
- CVE-2022-22305 Security feature bypass in FortiAnalyzer
- CVE-2022-22304 Cross-site scripting in Fortinet FortiAuthenticator OutlookAgent
- CVE-2022-22303 Information disclosure in Fortinet FortiManager
- CVE-2022-22302 Information disclosure in FortiAuthenticator
- CVE-2022-22301 Command injection in Fortinet FortiAP-C
- CVE-2022-22300 Security feature bypass in Fortinet FortiManager, FortiAnalyzer
- CVE-2022-2230 Cross-site scripting in GitLab
- CVE-2022-22299 Memory corruption in Fortinet FortiADC, FortiProxy, FortiMail, FortiOS
- CVE-2022-22298 Command injection in FortiIsolator
- CVE-2022-22297 Path traversal in FortiRecorder
- CVE-2022-22296 Missing authorization in hospital\'s patient records management system project:hospital\'s patient records management system
- CVE-2022-22295 SQL injection in metinfo:metinfo
- CVE-2022-22294 SQL injection in zfaka project:zfaka
- CVE-2022-22293 Cross site scripting in dolibarr
- CVE-2022-22292 Missing authorization in Samsung Mobile Devices
- CVE-2022-22291 Information disclosure in Samsung Mobile Devices
- CVE-2022-22290 Other in Samsung Internet
- CVE-2022-2229 Missing authorization in GitLab
- CVE-2022-22289 Auth bypass in S Assistant
- CVE-2022-22288 Missing authorization in Galaxy Store
- CVE-2022-22287 Information disclosure in Samsung Email
- CVE-2022-22286 Privilege escalation in Bixby Routines
- CVE-2022-22285 Privilege escalation in Reminder
- CVE-2022-22284 Auth bypass in Samsung Internet
- CVE-2022-22283 Auth bypass in Samsung Health
- CVE-2022-22282 Missing authorization in SonicWall SMA1000
- CVE-2022-22281 Memory corruption in SonicWall NetExtender Windows (32 and 64 bit) Client
- CVE-2022-22280 SQL injection in SonicWall Analytics On-Prem
- CVE-2022-2228 Information disclosure in GitLab
- CVE-2022-22279 Path traversal in SonicWall SRA/SMA100
- CVE-2022-22278 Denial of service in SonicOS
- CVE-2022-22277 Information disclosure in SonicOS
- CVE-2022-22276 Information disclosure in SonicOS
- CVE-2022-22275 Security feature bypass in SonicOS
- CVE-2022-22274 Memory corruption in SonicOS
- CVE-2022-22273 Command injection in SonicWall SRA/SMA100
- CVE-2022-22272 Missing authorization in Samsung Mobile Devices
- CVE-2022-22271 Memory corruption in Samsung Mobile Devices