Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 423 of 437.
- CVE-2022-1183 Destroying a TLS session early causes assertion failure
- CVE-2022-1182 Visual Slide Box Builder <= 3.2.9 - Subscriber+ SQLi
- CVE-2022-1181 Stored Cross Site Scripting in openemr/openemr
- CVE-2022-1180 Reflected Cross Site Scripting in openemr/openemr
- CVE-2022-1179 Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr
- CVE-2022-1178 Stored Cross Site Scripting in openemr/openemr
- CVE-2022-1177 Accounting User Can Download Patient Reports in openemr in openemr/openemr
- CVE-2022-1176 Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat
- CVE-2022-1175 Cross-site scripting in GitLab
- CVE-2022-1174 Denial of service in GitLab
- CVE-2022-1173 stored xss in getgrav/grav
- CVE-2022-1172 Null Pointer Dereference Caused Segmentation Fault in gpac/gpac
- CVE-2022-1171 Vertical scroll recent post < 14.0 - Reflected Cross-Site Scripting
- CVE-2022-1170 JobMonster < 4.5.2.9 - Unauthenticated Reflected Cross-Site Scripting
- CVE-2022-1169 Careerfy < 3.9.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
- CVE-2022-1168 JobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
- CVE-2022-1167 CareerUp < 2.3.1 - Unauthenticated Reflected Cross-Site Scripting
- CVE-2022-1166 JobMonster < 4.6.6.1 - Directory Listing in Upload Folder
- CVE-2022-1165 Blackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing
- CVE-2022-1164 Wyzi < 2.4.3 - Reflected Cross-Site Scripting (XSS)
- CVE-2022-1163 Cross-site Scripting (XSS) - Stored in mineweb/minewebcms
- CVE-2022-1162 Hardcoded credentials in GitLab
- CVE-2022-1161 ICSA-22-090-05 Rockwell Automation Logix Controllers
- CVE-2022-1160 heap buffer overflow in get_one_sourceline in vim/vim
- CVE-2022-1159 Rockwell Automation Studio 5000 Logix Designer Code Injection
- CVE-2022-1158 Memory corruption in kernel
- CVE-2022-1157 Information disclosure in GitLab
- CVE-2022-1156 Books & Papers <= 0.20210223 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1155 Old sessions are not blocked by the login enable function. in snipe/snipe-it
- CVE-2022-1154 Use after free in utf_ptr2char in vim/vim
- CVE-2022-1153 LayerSlider < 7.1.2 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1152 Menubar < 5.8 - Reflected Cross-Site Scripting
- CVE-2022-1148 Missing authorization in GitLab
- CVE-2022-1146 Information disclosure in Chrome
- CVE-2022-1145 Use after free in Chrome
- CVE-2022-1144 Use after free in Chrome
- CVE-2022-1143 Memory corruption in Chrome
- CVE-2022-1142 Memory corruption in Chrome
- CVE-2022-1141 Use after free in Chrome
- CVE-2022-1139 Information disclosure in Chrome
- CVE-2022-1138 Other in Chrome
- CVE-2022-1137 Information disclosure in Chrome
- CVE-2022-1136 Use after free in Chrome
- CVE-2022-1135 Use after free in Chrome
- CVE-2022-1134 Memory corruption in Chrome
- CVE-2022-1133 Use after free in Chrome
- CVE-2022-1132 Security feature bypass in Chrome
- CVE-2022-1131 Use after free in Chrome
- CVE-2022-1130 Security feature bypass in Chrome
- CVE-2022-1129 Security feature bypass in Chrome
- CVE-2022-1128 Information disclosure in Chrome
- CVE-2022-1127 Use after free in Chrome
- CVE-2022-1125 Use after free in Chrome
- CVE-2022-1124 Missing authorization in GitLab
- CVE-2022-1123 Leaflet Maps Marker < 3.12.5 - Admin+ SQLi
- CVE-2022-1122 Memory corruption in openjpeg2
- CVE-2022-1121 Denial of service in GitLab Pages
- CVE-2022-1120 Information disclosure in GitLab
- CVE-2022-1119 Simple File List <= 3.2.7 - Arbitrary File Download
- CVE-2022-1118 Rockwell Automation ISaGRAF Deserialization of Untrusted Data
- CVE-2022-1117 Security feature bypass in fapolicyd
- CVE-2022-1116 Integer overflow in Kernel
- CVE-2022-1115 Memory corruption in ImageMagick
- CVE-2022-1114 Use after free in ImageMagick
- CVE-2022-1113 Flower Delivery by Florist One <= 3.7 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1112 Autolinks <= 1.0.1 - Stored Cross-Site Scripting via CSRF
- CVE-2022-1111 Business logic in GitLab
- CVE-2022-1110 Memory corruption in Smart Standby Driver
- CVE-2022-1109 Misconfiguration in Leyun
- CVE-2022-1108 Memory corruption in ThinkPad BIOS
- CVE-2022-1107 Privilege escalation in ThinkPad BIOS
- CVE-2022-1106 use after free in mrb_vm_exec in mruby/mruby
- CVE-2022-1105 Missing authorization in GitLab
- CVE-2022-1104 Popup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1103 Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload
- CVE-2022-1102 SourceCodester Royale Event Management System companyprofile.php cross site scripting
- CVE-2022-1101 SourceCodester Royale Event Management System userregister.php improper authentication
- CVE-2022-1100 Denial of service in GitLab
- CVE-2022-1099 Denial of service in GitLab
- CVE-2022-1098 Delta Electronics DIAEnergie Uncontrolledly Search Path Element
- CVE-2022-1097 Use after free in Firefox
- CVE-2022-1096 Google Chromium V8 Type Confusion
- CVE-2022-1095 Mihdan: No External Links < 5.0.2 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1094 Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1093 WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs
- CVE-2022-1092 myCred < 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure
- CVE-2022-1091 Safe SVG < 1.9.10 - SVG Sanitisation Bypass
- CVE-2022-1090 Good & Bad Comments <= 1.0.0 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1089 Bulk Edit and Create User Profiles < 1.5.14 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1088 Page Security & Membership <= 1.5.15 - Admin+ Stored Cross-Site Scripting
- CVE-2022-1087 htmly Edit Profile Module cross site scripting
- CVE-2022-1086 DolphinPHP User Management Page cross site scripting
- CVE-2022-1085 CLTPHP POST Parameter cross site scripting
- CVE-2022-1084 SourceCodester One Church Management System Session userregister.php improper authentication
- CVE-2022-1083 Microfinance Management System sql injection
- CVE-2022-1082 SourceCodester Microfinance Management System Login Page login.php sql injection
- CVE-2022-1081 SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting
- CVE-2022-1080 SourceCodester One Church Management System attendancy.php sql injection
- CVE-2022-1079 SourceCodester One Church Management System churchprofile.php cross site scripting
- CVE-2022-1078 SourceCodester College Website Management System sql injection