Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 399 of 437.
- CVE-2022-21675 Bytecode Viewer v2.10.x Zip Slip
- CVE-2022-21673 OAuth Identity Token exposure in Grafana
- CVE-2022-21672 /etc/pki/tls and /etc/ssl/certs include distrusted certificates in make-ca
- CVE-2022-21671 Potential exposure of Replit tokens to an Unauthorized Actor in @replit/crosis
- CVE-2022-21670 Uncontrolled Resource Consumption in markdown-it
- CVE-2022-2167 Newspaper < 12 - Reflected Cross-Site Scripting
- CVE-2022-21669 Bot token exposed in main.py
- CVE-2022-21668 Pipenv's requirements.txt parsing allows malicious index url in comments
- CVE-2022-21667 Denial of Service in soketi
- CVE-2022-21666 SQL Injection in useredit.php
- CVE-2022-21664 SQL injection in WordPress
- CVE-2022-21663 Authenticated Object Injection in Multisites in WordPress
- CVE-2022-21662 Stored XSS in WordPress
- CVE-2022-21661 SQL injection in WordPress
- CVE-2022-21660 Missing authorization in gin-vue-admin
- CVE-2022-2166 Improper Restriction of Excessive Authentication Attempts in mastodon/mastodon
- CVE-2022-21659 Observable Response Discrepancy in Flask-AppBuilder
- CVE-2022-21658 Race condition in std::fs::remove_dir_all in rustlang
- CVE-2022-21657 X.509 Extended Key Usage and Trust Purposes bypass in Envoy
- CVE-2022-21656 X.509 subjectAltName matching bypass in Envoy
- CVE-2022-21655 Incorrect handling of internal redirects results in crash in Envoy
- CVE-2022-21654 Incorrect configuration handling allows TLS session re-use without re-validation in Envoy
- CVE-2022-21653 Hash collision in typelevel jawn
- CVE-2022-21652 Insufficient Session Expiration in shopware
- CVE-2022-21651 Open redirect in shopware
- CVE-2022-21650 Stored XSS via html file upload in convos
- CVE-2022-2165 Security feature bypass in Chrome
- CVE-2022-21649 Stored XSS via attribute in convos
- CVE-2022-21648 Sandbox bypass in Latte templates
- CVE-2022-21647 Deserialization of Untrusted Data in Codeigniter4
- CVE-2022-21646 Lookup operations do not take into account wildcards in SpiceDB
- CVE-2022-21644 SQL Injection via search in USOC
- CVE-2022-21643 SQL Injection in USOC
- CVE-2022-21642 Exposure of whisper participants in discourse
- CVE-2022-21641 Denial of service in MySQL Server
- CVE-2022-21640 Denial of service in MySQL Server
- CVE-2022-2164 Security feature bypass in Chrome
- CVE-2022-21639 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21638 Denial of service in MySQL Server
- CVE-2022-21637 Denial of service in MySQL Server
- CVE-2022-21636 Other in Applications Framework
- CVE-2022-21635 Other in MySQL Server
- CVE-2022-21634 Denial of service in GraalVM Enterprise Edition
- CVE-2022-21633 Denial of service in MySQL Server
- CVE-2022-21632 Denial of service in MySQL Server
- CVE-2022-21631 Cross-site scripting in JD Edwards EnterpriseOne Tools
- CVE-2022-21630 Cross-site scripting in JD Edwards EnterpriseOne Tools
- CVE-2022-2163 Use after free in Chrome
- CVE-2022-21629 Other in JD Edwards EnterpriseOne Tools
- CVE-2022-21628 Denial of service in Java SE JDK and JRE
- CVE-2022-21627 Denial of service in VM VirtualBox
- CVE-2022-21626 Denial of service in Java SE JDK and JRE
- CVE-2022-21625 Denial of service in MySQL Server
- CVE-2022-21624 Deserialization in Java SE JDK and JRE
- CVE-2022-21623 Other in Enterprise Manager Base Platform
- CVE-2022-21622 Other in SOA Suite
- CVE-2022-21621 Denial of service in VM VirtualBox
- CVE-2022-21620 Other in VM VirtualBox
- CVE-2022-2162 Security feature bypass in Chrome
- CVE-2022-21619 Security feature bypass in Java SE JDK and JRE
- CVE-2022-21618 Auth bypass in Java SE JDK and JRE
- CVE-2022-21617 Denial of service in MySQL Server
- CVE-2022-21616 Other in WebLogic Server
- CVE-2022-21615 Other in Enterprise Data Quality
- CVE-2022-21614 Information disclosure in Enterprise Data Quality
- CVE-2022-21613 Other in Enterprise Data Quality
- CVE-2022-21612 Other in Enterprise Data Quality
- CVE-2022-21611 Denial of service in MySQL Server
- CVE-2022-21610 Other in Solaris Operating System
- CVE-2022-2161 Use after free in Chrome
- CVE-2022-21609 Other in Business Intelligence Enterprise Edition
- CVE-2022-21608 Denial of service in MySQL Server
- CVE-2022-21607 Denial of service in MySQL Server
- CVE-2022-21606 Cross-site scripting in Services for Microsoft Transaction Server
- CVE-2022-21605 Denial of service in MySQL Server
- CVE-2022-21604 Denial of service in MySQL Server
- CVE-2022-21603 Other in Database - Enterprise Edition
- CVE-2022-21602 Information disclosure in PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21601 Other in Communications Billing and Revenue Management
- CVE-2022-21600 Other in MySQL Server
- CVE-2022-2160 Security feature bypass in Chrome
- CVE-2022-21599 Denial of service in MySQL Server
- CVE-2022-21598 Other in Siebel Core - DB Deployment and Configuration
- CVE-2022-21597 Information disclosure in GraalVM Enterprise Edition
- CVE-2022-21596 Other in Database - Enterprise Edition
- CVE-2022-21595 Denial of service in MySQL Server
- CVE-2022-21594 Denial of service in MySQL Server
- CVE-2022-21593 Other in HTTP Server
- CVE-2022-21592 Information disclosure in MySQL Server
- CVE-2022-21591 Other in Transportation Management
- CVE-2022-21590 Other in BI Publisher (formerly XML Publisher)
- CVE-2022-21589 Information disclosure in MySQL Server
- CVE-2022-21587 Oracle E-Business Suite Unspecified
- CVE-2022-21586 Missing authorization in Banking Trade Finance
- CVE-2022-21585 Other in Banking Trade Finance
- CVE-2022-21584 Other in Banking Trade Finance
- CVE-2022-21583 Other in Banking Trade Finance
- CVE-2022-21582 Other in Banking Trade Finance
- CVE-2022-21581 Other in Banking Trade Finance
- CVE-2022-21580 Other in Financial Services Revenue Management and Billing