Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 415 of 437.
- CVE-2022-20017 Information disclosure in MT6765, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797
- CVE-2022-20016 Race condition in MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797
- CVE-2022-20015 Information disclosure in MT6739, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8169
- CVE-2022-20014 Memory corruption in MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8185, MT8385, MT8788, MT8789
- CVE-2022-20013 Race condition in MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797
- CVE-2022-20012 Integer overflow in MT6580, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6757, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8127, MT8163, MT8167, MT8168, MT8169, MT8173, MT8183, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8788
- CVE-2022-20011 Missing authorization in Android
- CVE-2022-20010 Memory corruption in Android
- CVE-2022-2001 DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-20009 Memory corruption in Android
- CVE-2022-20008 Information disclosure in Android
- CVE-2022-20007 Race condition in Android
- CVE-2022-20006 Race condition in Android
- CVE-2022-20005 Privilege escalation in Android
- CVE-2022-20004 Missing authorization in Android
- CVE-2022-20002 Missing authorization in Android
- CVE-2022-20001 Injection in fish
- CVE-2022-2000 Out-of-bounds Write in vim/vim
- CVE-2022-1999 Missing authorization in GitLab
- CVE-2022-1998 Use after free in Kernel
- CVE-2022-1997 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
- CVE-2022-1996 Authorization Bypass Through User-Controlled Key in emicklei/go-restful
- CVE-2022-1995 miniOrange's Malware Scanner < 4.5.2 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1994 Google Authenticator < 1.0.8 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1993 Path Traversal in gogs/gogs
- CVE-2022-1992 Path Traversal in gogs/gogs
- CVE-2022-1991 Fast Food Ordering System Master List Master.php cross site scripting
- CVE-2022-1990 Nested Pages < 3.1.21 - Admin+ Stored Cross Site Scripting
- CVE-2022-1989 CODESYS Visualization vulnerable to user enumeration
- CVE-2022-1988 Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts
- CVE-2022-1987 Buffer Over-read in bfabiszewski/libmobi
- CVE-2022-1986 OS Command Injection in gogs/gogs
- CVE-2022-1985 Download Manager <= 3.2.42 - Reflected Cross-Site Scripting
- CVE-2022-1984 Deserialization in HYPR Windows WFA
- CVE-2022-1983 Missing authorization in GitLab
- CVE-2022-1982 A crafted SVG attachment can crash a Mattermost server
- CVE-2022-1981 Security feature bypass in GitLab
- CVE-2022-1980 SourceCodester Product Show Room Site cross site scripting
- CVE-2022-1979 SourceCodester Product Show Room Site p=contact cross site scripting
- CVE-2022-1977 WP Ultimate CSV Importer < 6.5.3 - Admin+ Blind SSRF
- CVE-2022-1976 Use after free in kernel
- CVE-2022-1975 Race condition in Linux kernel
- CVE-2022-1974 Use after free in Linux kernel
- CVE-2022-1973 Use after free in kernel
- CVE-2022-1971 NextCellent Gallery <= 1.9.35 - Admin+ Stored XSS
- CVE-2022-1969 Mobile browser color select <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2022-1968 Use After Free in vim/vim
- CVE-2022-1967 WP Championship < 9.3 - Multiple CSRF
- CVE-2022-1965 CODESYS runtime system prone to file deletion due to improper error handling
- CVE-2022-1964 Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVG
- CVE-2022-1963 Information disclosure in GitLab
- CVE-2022-1962 Stack exhaustion due to deeply nested types in go/parser
- CVE-2022-1961 Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID
- CVE-2022-1960 MyCSS <= 1.1 - Arbitrary Settings Update via CSRF
- CVE-2022-1959 Auth bypass in AppLock - Fingerprint
- CVE-2022-1958 FileCloud NTFS access control
- CVE-2022-1957 Comment License < 1.4.0 - Arbitrary Settings Update via CSRF
- CVE-2022-1956 Shortcut Macros <= 1.3 - Subscriber+ Arbitrary Settings Update
- CVE-2022-1955 Auth bypass in Session
- CVE-2022-1954 Denial of service in GitLab
- CVE-2022-1953 Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File Deletion
- CVE-2022-1952 eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
- CVE-2022-1951 Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-Scripting
- CVE-2022-1950 Youzify < 1.2.0 - Unauthenticated SQLi
- CVE-2022-1949 Missing authorization in 389-ds-base
- CVE-2022-1948 Cross-site scripting in GitLab
- CVE-2022-1947 Use of Incorrect Operator in polonel/trudesk
- CVE-2022-1946 Gallery < 2.0.0 - Reflected Cross-Site Scripting
- CVE-2022-1945 Coming Soon and Maintenance by Colorlib < 1.0.99 - Admin+ Stored Cross Site Scripting
- CVE-2022-1944 Missing authorization in GitLab
- CVE-2022-1943 Memory corruption in Kernel
- CVE-2022-1942 Heap-based Buffer Overflow in vim/vim
- CVE-2022-1941 Out of Memory issue in ProtocolBuffers for cpp and python
- CVE-2022-1940 Cross-site scripting in GitLab
- CVE-2022-1939 Allow SVG Files < 1.1 - Admin+ Arbitrary File Upload
- CVE-2022-1938 Awin Data Feed < 1.8 - Unauthenticated Stored Cross-Site Scripting
- CVE-2022-1937 Awin Data Feed < 1.8 - Reflected Cross-Site Scripting
- CVE-2022-1936 Missing authorization in GitLab
- CVE-2022-1935 Missing authorization in GitLab
- CVE-2022-1934 Use After Free in mruby/mruby
- CVE-2022-1933 CDI < 5.1.9 - Reflected Cross-Site-Scripting
- CVE-2022-1932 Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting
- CVE-2022-1931 Incorrect Synchronization in polonel/trudesk
- CVE-2022-1930 ReDoS in eth-account encode_structured_data function
- CVE-2022-1929 Exponential ReDoS in devcert
- CVE-2022-1928 Cross-site Scripting (XSS) - Stored in go-gitea/gitea
- CVE-2022-1927 Buffer Over-read in vim/vim
- CVE-2022-1926 Integer Overflow or Wraparound in polonel/trudesk
- CVE-2022-1925 Integer overflow in GStreamer
- CVE-2022-1924 Integer overflow in GStreamer
- CVE-2022-1923 Integer overflow in GStreamer
- CVE-2022-1922 Integer overflow in GStreamer
- CVE-2022-1921 Integer overflow in GStreamer
- CVE-2022-1920 Integer overflow in GStreamer
- CVE-2022-1919 Use after free in Chrome
- CVE-2022-1918 ToolBar to Share <= 2.0 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-1916 Active Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting
- CVE-2022-1915 WP Zillow Review Slider < 2.4 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1914 Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF
- CVE-2022-1913 Add Post URL <= 2.1.0 - Arbitrary Settings Update to Stored XSS via CSRF