Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 422 of 437.
- CVE-2022-1288 School Club Application System cross site scripting
- CVE-2022-1287 School Club Application System resource injection
- CVE-2022-1286 heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby
- CVE-2022-1285 Server-Side Request Forgery (SSRF) in gogs/gogs
- CVE-2022-1284 heap-use-after-free in radareorg/radare2
- CVE-2022-1283 NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2
- CVE-2022-1282 Photo Gallery < 1.6.3 - Reflected Cross-Site Scripting
- CVE-2022-1281 Photo Gallery < 1.6.3 - Unauthenticated SQL Injection
- CVE-2022-1280 Use after free in kernel
- CVE-2022-1279 Weak cryptography in ebics-java-client
- CVE-2022-1278 WildFly vulnerable to Insecure Default Initialization of Resource
- CVE-2022-1277 SQL Injection in Inavitas Solar Log
- CVE-2022-1276 Out-of-bounds Read in mrb_get_args in mruby/mruby
- CVE-2022-1275 BannerMan <= 0.2.4 - Multiple Admin+ Stored Cross-Site Scripting
- CVE-2022-1274 HTML Injection in Keycloak Admin REST API
- CVE-2022-1273 Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE
- CVE-2022-1271 Path traversal in gzip, xz-utils
- CVE-2022-1270 Memory corruption in GraphicsMagick
- CVE-2022-1269 Fast Flow < 1.2.12 - Reflected Cross-Site Scripting
- CVE-2022-1268 Donate Extra <= 2.02 - Reflected Cross-Site Scripting
- CVE-2022-1267 BMI BMR Calculator <= 1.3 - Reflected Cross-Site Scripting
- CVE-2022-1266 Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS
- CVE-2022-1265 BulletProof Security < 6.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1264 Inductive Automation Ignition
- CVE-2022-1263 Null dereference in Kernel:KVM
- CVE-2022-1262 Command injection in D-Link Routers
- CVE-2022-1261 Matrikon OPC Server Improper Access Control
- CVE-2022-1259 Denial of service in undertow
- CVE-2022-1258 SQL injection vulnerability in McAfee Agent's ePO extension
- CVE-2022-1257 Improper Verification of Cryptographic Signature by McAfee Agent
- CVE-2022-1256 Improper Privilege Management in McAfee Agent for Windows
- CVE-2022-1255 Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1254 SWG URL redirection vulnerability
- CVE-2022-1253 Heap-based Buffer Overflow in strukturag/libde265
- CVE-2022-1252 Use of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard5
- CVE-2022-1251 Ask Me < 6.8.4 - CSRF in Edit Profile
- CVE-2022-1250 LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting
- CVE-2022-1249 Null dereference in pesign
- CVE-2022-1248 SAP Information System POST Request add_admin.php improper authentication
- CVE-2022-1247 Race condition in Kernel
- CVE-2022-1245 Keycloak vulnerable to privilege escalation on Token Exchange feature
- CVE-2022-1244 heap-buffer-overflow in radareorg/radare2
- CVE-2022-1243 CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js
- CVE-2022-1242 Other in Apport
- CVE-2022-1241 Ask Me < 6.8.2 - Reflected Cross-Site Scripting
- CVE-2022-1240 Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2
- CVE-2022-1239 HubSpot < 8.8.15 - Contributor+ Blind SSRF
- CVE-2022-1238 Out-of-bounds Write in libr/bin/format/ne/ne.c in radareorg/radare2
- CVE-2022-1237 Improper Validation of Array Index in radareorg/radare2
- CVE-2022-1236 Weak Password Requirements in weseek/growi
- CVE-2022-1235 Weak secrethash can be brute-forced in livehelperchat/livehelperchat
- CVE-2022-1234 XSS in livehelperchat in livehelperchat/livehelperchat
- CVE-2022-1233 URL Confusion When Scheme Not Supplied in medialize/uri.js
- CVE-2022-1232 Memory corruption in Chrome
- CVE-2022-1231 XSS via Embedded SVG in SVG Diagram Format in plantuml/plantuml
- CVE-2022-1230 Open redirect in Galaxy S21
- CVE-2022-1229 Memory corruption in MicroStation CONNECT
- CVE-2022-1228 Opensea < 1.0.3 - Admin+ Stored XSS
- CVE-2022-1227 Podman publishes a malicious image to public registries
- CVE-2022-1226 Cross-site Scripting (XSS) in phpipam/phpipam
- CVE-2022-1225 Incorrect Privilege Assignment in phpipam/phpipam
- CVE-2022-1224 Improper Authorization in phpipam/phpipam
- CVE-2022-1223 Incorrect Authorization in phpipam/phpipam
- CVE-2022-1222 Inf loop in gpac/gpac
- CVE-2022-1221 Gwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site Scripting
- CVE-2022-1220 FoxyShop < 4.8.2 - Reflected Cross-Site Scripting
- CVE-2022-1219 SQL injection in RecyclebinController.php in pimcore/pimcore
- CVE-2022-1218 Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting
- CVE-2022-1217 Custom TinyMCE Shortcode Button <= 1.1 - Reflected Cross-Site Scripting
- CVE-2022-1216 Advanced Image Sitemap <= 1.2 - Reflected Cross-Site Scripting
- CVE-2022-1215 Memory corruption in libinput
- CVE-2022-1213 SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat
- CVE-2022-1212 Use-After-Free in str_escape in mruby/mruby in mruby/mruby
- CVE-2022-1211 tildearrow Furnace FUR to VGM Converter stack-based overflow
- CVE-2022-1210 LibTIFF tiff2ps resource consumption
- CVE-2022-1209 Ultimate Member <= 2.3.1 - Arbitrary Redirect
- CVE-2022-1208 Ultimate Member <= 2.3.2 - Stored Cross-Site Scripting
- CVE-2022-1207 Out-of-bounds read in radareorg/radare2
- CVE-2022-1206 AdRotate – Ad manager & AdSense Ads <= 5.13.2 - Authenticated (Admin+) Double Extension Arbitrary File Upload
- CVE-2022-1205 Null dereference in Kernel
- CVE-2022-1204 Use after free in Kernel
- CVE-2022-1203 Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update
- CVE-2022-1202 WP-CRM <= 1.2.1 - CSV Injection
- CVE-2022-1201 NULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby
- CVE-2022-1199 Null dereference in Kernel
- CVE-2022-1198 Use after free in kernel
- CVE-2022-1197 Security feature bypass in Thunderbird
- CVE-2022-1196 Use after free in Firefox ESR
- CVE-2022-1195 Use after free in kernel
- CVE-2022-1194 Mobile Events Manager < 1.4.8 - Admin+ CSV Injection
- CVE-2022-1193 Missing authorization in GitLab
- CVE-2022-1192 Turn off all comments <= 1.0 - Reflected Cross-Site Scripting
- CVE-2022-1191 SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat
- CVE-2022-1190 Cross-site scripting in GitLab
- CVE-2022-1189 Missing authorization in GitLab
- CVE-2022-1188 Server-side request forgery in GitLab
- CVE-2022-1187 WP YouTube Live <= 1.7.21 - Reflected Cross-Site Scripting
- CVE-2022-1186 Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure
- CVE-2022-1185 Memory corruption in GitLab
- CVE-2022-1184 Use after free in Kernel