Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 404 of 437.
- CVE-2022-2120 OFFIS DCMTK Path Traversal
- CVE-2022-21199 Hardcoded credentials in reolink:rlc-410w firmware
- CVE-2022-21198 Race condition in Intel(R) Processors
- CVE-2022-21197 Denial of service in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-21196 Airspan Networks Mimosa Improper Authorization
- CVE-2022-21195 Regular Expression Denial of Service (ReDoS)
- CVE-2022-21194 Hardcoded credentials in CENTUM VP
- CVE-2022-21193 Path traversal in TransmitMail
- CVE-2022-21192 Directory Traversal vulnerability in serve-lite
- CVE-2022-21191 global-modules-path Command Injection vulnerability
- CVE-2022-21190 Prototype Pollution
- CVE-2022-2119 OFFIS DCMTK Path Traversal
- CVE-2022-21189 Prototype Pollution
- CVE-2022-21187 Command Injection
- CVE-2022-21186 Arbitrary Command Injection
- CVE-2022-21184 Information disclosure in Atvise
- CVE-2022-21182 Privilege escalation in InRouter302
- CVE-2022-21181 Privilege escalation in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products
- CVE-2022-21180 Denial of service in Intel(R) Processors
- CVE-2022-2118 404s < 3.5.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-21179 Cross-site request forgery in EC-CUBE plugin 'Mail Magazine Management Plugin'
- CVE-2022-21178 Command injection in LinkHub Mesh Wifi
- CVE-2022-21177 Path traversal in CENTUM CS 3000
- CVE-2022-21176 Airspan Networks Mimosa SQL Injection
- CVE-2022-21174 Privilege escalation in Intel(R) Quartus(R) Prime Pro Edition
- CVE-2022-21173 Command injection in ELECOM LAN routers
- CVE-2022-21172 Memory corruption in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-21170 Security feature bypass in i-FILTER, i-FILTER Browser & Cloud MultiAgent for Windows, and D-SPA using i-FILTER
- CVE-2022-2117 GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
- CVE-2022-21169 Prototype Pollution
- CVE-2022-21168 ICSA-22-090-03 Fuji Electric Alpha5
- CVE-2022-21167 Arbitrary Code Execution
- CVE-2022-21166 Information disclosure in Intel(R) Processors
- CVE-2022-21165 Arbitrary Command Injection
- CVE-2022-21164 Denial of Service (DoS)
- CVE-2022-21163 Missing authorization in Crypto API Toolkit for Intel(R) SGX
- CVE-2022-21162 Privilege escalation in Intel(R) HDMI Firmware Update tool for NUC
- CVE-2022-21160 Memory corruption in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-2116 Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting
- CVE-2022-21159 Denial of service in libiec61850
- CVE-2022-21158 Cross-site scripting in MarkText
- CVE-2022-21157 Missing authorization in Intel(R) Smart Campus Android application
- CVE-2022-21156 Memory corruption in Intel(R) Trace Analyzer and Collector
- CVE-2022-21155 Fernhill SCADA Uncontrolled Resource Consumption
- CVE-2022-21154 Integer overflow in Leadtools
- CVE-2022-21153 Missing authorization in Intel(R) Capital Global Summit Android application
- CVE-2022-21152 Missing authorization in Intel(R) Edge Insights for Industrial software
- CVE-2022-21151 Information disclosure in Intel(R) Processors
- CVE-2022-2115 Popup Anything < 2.1.7 - Reflected Cross-Site Scripting
- CVE-2022-21149 Cross-site Scripting (XSS)
- CVE-2022-21148 Privilege escalation in Intel(R) Edge Insights for Industrial software
- CVE-2022-21147 Memory corruption in Alyac
- CVE-2022-21146 ICSA-22-062-01 IPCOMM ipDIO
- CVE-2022-21145 Cross-site scripting in lansweeper
- CVE-2022-21144 Denial of Service (DoS)
- CVE-2022-21143 Airspan Networks Mimosa OS Command Injection
- CVE-2022-21142 Auth bypass in a-blog cms
- CVE-2022-21141 Airspan Networks Mimosa Incorrect Authorization
- CVE-2022-21140 Missing authorization in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products
- CVE-2022-2114 Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting
- CVE-2022-21139 Weak cryptography in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-21137 Omron CX-One
- CVE-2022-21136 Denial of service in Intel(R) Xeon(R) Processors
- CVE-2022-21134 Security feature bypass in reolink:rlc-410w firmware
- CVE-2022-21133 Memory corruption in Intel(R) Trace Analyzer and Collector
- CVE-2022-21132 Path traversal in pfSense-pkg-WireGuard
- CVE-2022-21131 Missing authorization in Intel(R) Xeon(R) Processors
- CVE-2022-2113 Cross-site Scripting (XSS) - Stored in inventree/inventree
- CVE-2022-21129 nemo-appium vulnerable to OS Command Injection
- CVE-2022-21128 Privilege escalation in Intel(R) Advisor software
- CVE-2022-21127 Information disclosure in Intel(R) Processors
- CVE-2022-21126 Creation of Temporary File in Directory with Insecure Permissions
- CVE-2022-21125 Information disclosure in Intel(R) Processors
- CVE-2022-21124 Memory corruption in CX-Programmer
- CVE-2022-21123 Information disclosure in Intel(R) Processors
- CVE-2022-21122 Arbitrary Code Execution
- CVE-2022-2112 Improper Neutralization of Formula Elements in a CSV File in inventree/inventree
- CVE-2022-2111 Unrestricted Upload of File with Dangerous Type in inventree/inventree
- CVE-2022-2108 Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
- CVE-2022-2107 ICSA-22-200-01 MiCODUS MV720 GPS tracker Use of Hard-coded Credentials
- CVE-2022-2106 Elcomplus SmartICS Path Traversal
- CVE-2022-2105 Secheron SEPCOS Control and Protection Relay
- CVE-2022-2104 Secheron SEPCOS Control and Protection Relay
- CVE-2022-2103 Secheron SEPCOS Control and Protection Relay
- CVE-2022-2102 Secheron SEPCOS Control and Protection Relay
- CVE-2022-2101 Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting
- CVE-2022-2100 Page Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting
- CVE-2022-2099 WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
- CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra
- CVE-2022-2097 AES OCB fails to encrypt some bytes
- CVE-2022-20969 Cross-site scripting in Cisco Umbrella Dashboard
- CVE-2022-20968 Memory corruption in Cisco Session Initiation Protocol (SIP) Software
- CVE-2022-20967 Cross-site scripting in Cisco Identity Services Engine Software
- CVE-2022-20966 Cross-site scripting in Cisco Identity Services Engine Software
- CVE-2022-20965 Missing authorization in Cisco Identity Services Engine Software
- CVE-2022-20964 Command injection in Cisco Identity Services Engine Software
- CVE-2022-20963 Cross-site scripting in Cisco Identity Services Engine Software
- CVE-2022-20962 Path traversal in Cisco Identity Services Engine Software
- CVE-2022-20961 Cross-site request forgery in Cisco Identity Services Engine Software
- CVE-2022-20960 Denial of service in Cisco Secure Email