Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 418 of 437.
- CVE-2022-1706 Ignition config accessible to unprivileged software on VMware
- CVE-2022-1705 Improper sanitization of Transfer-Encoding headers in net/http
- CVE-2022-1704 Inductive Automation Ignition
- CVE-2022-1703 Command injection in SMA100
- CVE-2022-1702 Open redirect in SonicWall SMA1000
- CVE-2022-1701 Hardcoded credentials in SonicWall SMA1000
- CVE-2022-1700 XML external entity in Cloud Security Gateway
- CVE-2022-1699 Uncontrolled Resource Consumption in causefx/organizr
- CVE-2022-1698 Allowing long password leads to denial of service in causefx/organizr
- CVE-2022-1697 Privilege escalation in Okta Active Directory Agent
- CVE-2022-1695 WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF
- CVE-2022-1694 Useful Banner Manager <= 1.6.1 - Modify banners via CSRF
- CVE-2022-1692 CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi
- CVE-2022-1691 Realty Workstation < 1.0.15 - Agent SQLi
- CVE-2022-1690 Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
- CVE-2022-1689 Note Press <= 0.1.10 - Admin+ SQLi via Update
- CVE-2022-1688 Note Press <= 0.1.10 - Admin+ SQLi via id
- CVE-2022-1687 Logo Slider <= 1.4.8 - Admin+ SQLi
- CVE-2022-1686 Five Minute Webshop <= 1.3.2 - Admin+ SQLi via id
- CVE-2022-1685 Five Minute Webshop <= 1.3.2 - Admin+ SQLi via orderby
- CVE-2022-1684 Cube Slider <= 1.2 - Admin+ SQLi
- CVE-2022-1683 amtyThumb <= 4.2.0 - Subscriber+ SQLi
- CVE-2022-1682 Reflected Xss using url based payload in neorazorx/facturascripts
- CVE-2022-1681 Authentication Bypass Using an Alternate Path or Channel in requarks/wiki
- CVE-2022-1680 Business logic in GitLab
- CVE-2022-1679 Use after free in Kernel
- CVE-2022-1678 Denial of service in kernel
- CVE-2022-1677 Other in Openshift
- CVE-2022-1674 NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim
- CVE-2022-1673 WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout page
- CVE-2022-1672 Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
- CVE-2022-1671 Null dereference in Kernel
- CVE-2022-1670 Business logic in Octopus Server
- CVE-2022-1669 Circutor COMPACT DC-S BASIC
- CVE-2022-1668 Secheron SEPCOS Control and Protection Relay
- CVE-2022-1667 Secheron SEPCOS Control and Protection Relay
- CVE-2022-1666 Secheron SEPCOS Control and Protection Relay
- CVE-2022-1665 Security feature bypass in Red Hat Enterprise Linux
- CVE-2022-1664 directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar
- CVE-2022-1663 Stop Spam Comments <= 0.2.1.2 - Access Token Bypass
- CVE-2022-1662 Information disclosure in convert2rhel
- CVE-2022-1661 Keysight N6854A Geolocation server and N6841A RF Sensor software
- CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software
- CVE-2022-1659 JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service
- CVE-2022-1658 Jupiter Theme <= 6.10.1 - Authenticated Arbitrary Plugin Deletion
- CVE-2022-1657 JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion
- CVE-2022-1656 Missing authorization in Jupiter X
- CVE-2022-1655 Misconfiguration in OpenStack
- CVE-2022-1654 Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
- CVE-2022-1653 Social Share Buttons by Supsystic < 2.2.4 - Multiple CSRF
- CVE-2022-1652 Use after free in kernel
- CVE-2022-1651 Denial of service in Kernel
- CVE-2022-1650 Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource
- CVE-2022-1649 Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in radareorg/radare2
- CVE-2022-1648 Relative Path Traversal to Remote Code Execution in File Manager
- CVE-2022-1647 FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting
- CVE-2022-1646 Simple Real Estate Pack <= 1.4.8 - Admin+ Stored Cross Site Scripting
- CVE-2022-1645 Amazon Link <= 3.2.10 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1644 Call&Book Mobile Bar <= 1.2.2 - Admin+ Stored Cross Site Scripting
- CVE-2022-1643 Birthdays Widget <= 1.7.18 - Admin+ Stored Cross Site Scripting
- CVE-2022-1642 Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder
- CVE-2022-1641 Use after free in Chrome
- CVE-2022-1640 Use after free in Chrome
- CVE-2022-1639 Use after free in Chrome
- CVE-2022-1638 Memory corruption in Chrome
- CVE-2022-1637 Information disclosure in Chrome
- CVE-2022-1636 Use after free in Chrome
- CVE-2022-1635 Use after free in Chrome
- CVE-2022-1634 Use after free in Chrome
- CVE-2022-1633 Use after free in Chrome
- CVE-2022-1632 Security feature bypass in Openshift
- CVE-2022-1631 Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber
- CVE-2022-1630 WP-Email < 2.69.0 - Log Deletion via CSRF
- CVE-2022-1629 Buffer Over-read in function find_next_quote in vim/vim
- CVE-2022-1628 Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2022-1627 My Private Site < 3.0.8 - Arbitrary Settings Update via CSRF
- CVE-2022-1626 Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF
- CVE-2022-1625 New User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRF
- CVE-2022-1624 Latest Tweets Widget <= 1.1.4 - Arbitrary Settings Update via CSRF
- CVE-2022-1623 Memory corruption in libtiff
- CVE-2022-1622 Memory corruption in libtiff
- CVE-2022-1621 Heap buffer overflow in vim_strncpy find_word in vim/vim
- CVE-2022-1620 NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim
- CVE-2022-1619 Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim
- CVE-2022-1618 Coru LFMember <= 1.0.2 - Stored Cross-Site Scripting via CSRF
- CVE-2022-1617 WP-Invoice <= 4.3.1 - Stored Cross-Site Scripting via CSRF
- CVE-2022-1616 Use after free in append_command in vim/vim
- CVE-2022-1615 Weak cryptography in Samba
- CVE-2022-1614 WP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing
- CVE-2022-1613 Restricted Site Access < 7.3.2 - Access Bypass via IP Spoofing
- CVE-2022-1612 Webriti SMTP Mail <= 1.0 - Arbitrary Settings Update via CSRF
- CVE-2022-1611 Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF
- CVE-2022-1610 Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF
- CVE-2022-1609 The School Management < 9.9.7 - Unauthenticated RCE via REST api
- CVE-2022-1608 OnePress Social Locker <= 5.6.2 - Arbitrary Settings Update via CSRF
- CVE-2022-1607 Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller
- CVE-2022-1606 Incorrect privilege assignment in M-Files Server
- CVE-2022-1605 Email Users <= 4.8.8 - Arbitrary Settings Update via CSRF
- CVE-2022-1604 MailerLite < 1.5.4 - Reflected Cross-Site Scripting
- CVE-2022-1603 Mail Subscribe List < 2.1.4 - Arbitrary Subscribed User Deletion via CSRF