Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 417 of 437.
- CVE-2022-1806 Cross-site Scripting (XSS) - Reflected in rtxteam/rtx
- CVE-2022-1805 Security feature bypass in Tera2 Zero Client
- CVE-2022-1804 Accountsservice incorrectly drops privileges
- CVE-2022-1803 Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk
- CVE-2022-1802 Code injection in Firefox
- CVE-2022-1801 Very Simple Contact Form < 11.6 - Captcha bypass
- CVE-2022-1800 Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection
- CVE-2022-1799 Incorrect signature verification on Google play-services-basement in Google Play SDK
- CVE-2022-1798 Path Traversal vulnerability in Kubevirt
- CVE-2022-1797 Rockwell Automation Logix Controllers Uncontrolled Resource Consumption
- CVE-2022-1796 Use After Free in vim/vim
- CVE-2022-1795 Use After Free in gpac/gpac
- CVE-2022-1794 Plaintext Storage of a password in CODESYS V3 OPC DA Server
- CVE-2022-1793 Private Files <= 0.40 - Protection Disabling via CSRF
- CVE-2022-1792 Quick Subscribe <= 1.7.1 - Arbitrary Settings Update via CSRF to Stored XSS
- CVE-2022-1791 One Click Plugin Updater <= 2.4.14 - Arbitrary Settings Update via CSRF
- CVE-2022-1790 New User Email Set Up <= 0.5.2 - Arbitrary Settings Update via CSRF
- CVE-2022-1789 Null dereference in kernel
- CVE-2022-1788 Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF
- CVE-2022-1787 Sideblog <= 6.0 - Arbitrary Settings Update via CSRF to Stored XSS
- CVE-2022-1786 Use after free in kernel
- CVE-2022-1785 Out-of-bounds Write in vim/vim
- CVE-2022-1784 Server-Side Request Forgery (SSRF) in jgraph/drawio
- CVE-2022-1783 Business logic in GitLab
- CVE-2022-1782 Cross-site Scripting (XSS) - Generic in erudika/para
- CVE-2022-1781 postTabs <= 2.10.6 - Arbitrary Settings Update via CSRF to Stored XSS
- CVE-2022-1780 LaTeX for WordPress <= 3.4.10 - Arbitrary Settings Update via CSRF to Stored XSS
- CVE-2022-1779 Auto Delete Posts <= 1.3.0 - Arbitrary Settings Update via CSRF
- CVE-2022-1778 Memory corruption in MicroSCADA X SYS600
- CVE-2022-1777 Filr - Secure Document Library < 1.2.2.1 - Subscriber+ AJAX Calls
- CVE-2022-1776 Icegram < 2.1.8 - Contributor+ Stored Cross-Site Scripting
- CVE-2022-1775 Weak Password Requirements in polonel/trudesk
- CVE-2022-1774 Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio
- CVE-2022-1773 WP Athletics <= 1.1.7 - Reflected Cross-Site Scripting
- CVE-2022-1772 Google Places Review < 2.0.0 - Admin+ Stored Cross Site Scripting
- CVE-2022-1771 Uncontrolled Recursion in vim/vim
- CVE-2022-1770 Improper Privilege Management in polonel/trudesk
- CVE-2022-1769 Buffer Over-read in vim/vim
- CVE-2022-1768 RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection
- CVE-2022-1767 Server-Side Request Forgery (SSRF) in jgraph/drawio
- CVE-2022-1766 Information disclosure in Anchore Enterprise
- CVE-2022-1765 Hot Linked Image Cacher <= 1.16 - Image upload/cache abuse via CSRF
- CVE-2022-1764 WP-chgFontSize <= 1.8 - Arbitrary Settings Update via CSRF to Stored XSS
- CVE-2022-1763 Static Page eXtended <= 2.1 - Arbitrary Settings Update via CSRF to Stored XSS
- CVE-2022-1762 iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing
- CVE-2022-1761 Peter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRF
- CVE-2022-1760 Core Control <= 1.2.1 - Arbitrary Settings Update via CSRF
- CVE-2022-1759 RB Internal Links <= 2.0.16 - Stored Cross-Site Scripting via CSRF
- CVE-2022-1758 Genki Pre-Publish Reminder <= 1.4.1 - Stored XSS & RCE via CSRF
- CVE-2022-1757 Pagebar < 2.70 - Arbitrary Settings Update via CSRF to Stored XSS
- CVE-2022-1756 Newsletter < 7.4.5 - Reflected Cross-Site Scripting
- CVE-2022-1755 SVG Support < 2.5 - Author+ Stored Cross-Site Scripting
- CVE-2022-1754 Integer Overflow or Wraparound in polonel/trudesk
- CVE-2022-1753 WoWonder Group requests.php access control
- CVE-2022-1752 Unrestricted Upload of File with Dangerous Type in polonel/trudesk
- CVE-2022-1751 Skitter Slideshow <= 2.5.2 - Unauthenticated Server-Side Request Forgery
- CVE-2022-1750 Sticky Popup <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2022-1749 WPMK Ajax Finder <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting
- CVE-2022-1748 Softing Secure Integration Server NULL Pointer Dereference
- CVE-2022-1747 Auth bypass in ImageCast X application
- CVE-2022-1746 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266
- CVE-2022-1745 2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290
- CVE-2022-1744 2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
- CVE-2022-1743 2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24
- CVE-2022-1742 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424
- CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912
- CVE-2022-1740 2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283
- CVE-2022-1739 2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347
- CVE-2022-1738 Fuji Electric D300win Out-of-bounds Read
- CVE-2022-1737 Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write
- CVE-2022-1736 Misconfiguration in Ubuntu's gnome-control-center
- CVE-2022-1735 Classic Buffer Overflow in vim/vim
- CVE-2022-1734 Use after free in kernel
- CVE-2022-1733 Heap-based Buffer Overflow in vim/vim
- CVE-2022-1732 Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
- CVE-2022-1731 SQL injection in Metasonic Doc WebClient
- CVE-2022-1730 Cross-site Scripting (XSS) - Stored in jgraph/drawio
- CVE-2022-1729 Race condition in linux kernel
- CVE-2022-1728 Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk
- CVE-2022-1727 Improper Input Validation in jgraph/drawio
- CVE-2022-1726 Cross-site Scripting in bootstrap-table
- CVE-2022-1725 NULL Pointer Dereference in vim/vim
- CVE-2022-1724 Simple Membership < 4.1.1 - Reflected Cross-Site Scripting
- CVE-2022-1723 Server-Side Request Forgery (SSRF) in jgraph/drawio
- CVE-2022-1722 SSRF in editor's proxy via IPv6 link-local address in jgraph/drawio
- CVE-2022-1721 Path Traversal in WellKnownServlet in jgraph/drawio
- CVE-2022-1720 Buffer Over-read in function grab_file_name in vim/vim
- CVE-2022-1719 Reflected XSS on ticket filter function in polonel/trudesk
- CVE-2022-1718 Denial of service in polonel/trudesk
- CVE-2022-1717 Custom Share Buttons with Floating Sidebar < 4.2 - Admin+ Stored XSS
- CVE-2022-1716 Security feature bypass in Keep My Notes
- CVE-2022-1715 Account Takeover in neorazorx/facturascripts
- CVE-2022-1714 Out-of-bounds Read in radareorg/radare2
- CVE-2022-1713 SSRF on /proxy in jgraph/drawio
- CVE-2022-1712 LiveSync for WordPress <= 1.0 - Arbitrary Settings Update via CSRF
- CVE-2022-1711 Server-Side Request Forgery (SSRF) in jgraph/drawio
- CVE-2022-1710 Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1709 Throws SPAM Away < 3.3.1 - Comment Deletion via CSRF
- CVE-2022-1708 Node DOS by way of memory exhaustion through ExecSync request in CRI-O
- CVE-2022-1707 Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search