Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 425 of 437.
- CVE-2022-0973 Use after free in Chrome
- CVE-2022-0972 Use after free in Chrome
- CVE-2022-0971 Use after free in Chrome
- CVE-2022-0970 Cross-site Scripting (XSS) - Stored in getgrav/grav
- CVE-2022-0969 Image optimization & Lazy Load < 3.3.2 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0968 Integer Overflow in microweber
- CVE-2022-0967 Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc
- CVE-2022-0966 Stored XSS via File Upload in star7th/showdoc in star7th/showdoc
- CVE-2022-0965 Stored XSS viva .ofd file upload in star7th/showdoc
- CVE-2022-0964 Stored XSS viva .webmv file upload in star7th/showdoc
- CVE-2022-0963 Unrestricted XML Files Leads to Stored XSS in microweber/microweber
- CVE-2022-0962 Stored XSS viva .webma file upload in star7th/showdoc
- CVE-2022-0961 Denial of service in microweber
- CVE-2022-0960 Stored XSS viva .properties file upload in star7th/showdoc
- CVE-2022-0959 pgAdmin 4 Path Traversal vulnerability
- CVE-2022-0958 Mark Posts < 2.0.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0957 Stored XSS via File Upload in star7th/showdoc
- CVE-2022-0956 Stored XSS via File Upload in star7th/showdoc
- CVE-2022-0955 Cross-site Scripting (XSS) - Stored in pimcore/data-hub
- CVE-2022-0954 Stored Cross-site Scripting in Microweber
- CVE-2022-0953 Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting
- CVE-2022-0952 Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update
- CVE-2022-0951 File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc
- CVE-2022-0950 Unrestricted Upload of File with Dangerous Type in star7th/showdoc
- CVE-2022-0949 WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi
- CVE-2022-0948 Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
- CVE-2022-0947 Arctic Wireless Gateway Firewall vulnerability
- CVE-2022-0946 Stored XSS viva cshtm file upload in star7th/showdoc
- CVE-2022-0945 Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc
- CVE-2022-0944 Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad
- CVE-2022-0943 Heap-based Buffer Overflow occurs in vim in vim/vim
- CVE-2022-0942 Stored XSS due to Unrestricted File Upload in star7th/showdoc
- CVE-2022-0941 Stored XSS due to Unrestricted File Upload in star7th/showdoc
- CVE-2022-0940 Stored XSS due to Unrestricted File Upload in star7th/showdoc
- CVE-2022-0939 Server-Side Request Forgery (SSRF) in janeczku/calibre-web
- CVE-2022-0938 Stored XSS via file upload in star7th/showdoc
- CVE-2022-0937 Stored xss in showdoc through file upload in star7th/showdoc
- CVE-2022-0936 Cross-site Scripting (XSS) - Stored in autolab/autolab
- CVE-2022-0935 Host Header injection in password Reset in livehelperchat/livehelperchat
- CVE-2022-0934 Use after free in dnsmasq
- CVE-2022-0932 Missing Authorization in saleor/saleor
- CVE-2022-0930 File upload filter bypass leading to stored XSS in microweber/microweber
- CVE-2022-0929 XSS on dynamic_text module in microweber/microweber
- CVE-2022-0928 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber
- CVE-2022-0924 Memory corruption in libtiff
- CVE-2022-0923 Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashx
- CVE-2022-0922 ICSMA-22-088-01 Philips e-Alert
- CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
- CVE-2022-0920 Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure
- CVE-2022-0919 Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure
- CVE-2022-0918 Denial of service in 389-ds-base
- CVE-2022-0916 Broken authentication on Logitech Options due to misvalidation of Oauth state parameter
- CVE-2022-0915 Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation
- CVE-2022-0914 Export All URLs < 4.3 - Private/Draft Post/Page Title Disclosure via CSRF
- CVE-2022-0913 Integer Overflow or Wraparound in microweber/microweber
- CVE-2022-0912 Unrestricted Upload of File with Dangerous Type in microweber/microweber
- CVE-2022-0911 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0910 Auth bypass in ATP series firmware
- CVE-2022-0909 Denial of service in libtiff
- CVE-2022-0908 Null dereference in libtiff
- CVE-2022-0907 Null dereference in libtiff
- CVE-2022-0906 Unrestricted file upload leads to stored XSS in microweber/microweber
- CVE-2022-0905 Missing Authorization in go-gitea/gitea
- CVE-2022-0904 Stack overflow in document extractor in Mattermost
- CVE-2022-0903 Stack overflow in SAML login in Mattermost
- CVE-2022-0902 ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access
- CVE-2022-0901 Ad Inserter < 2.7.12 - Reflected Cross-Site Scripting
- CVE-2022-0900 Cross-Site Scripting Vulnerability in DivvyDrive
- CVE-2022-0899 Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
- CVE-2022-0898 IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0897 Race condition in libvirt
- CVE-2022-0896 Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber
- CVE-2022-0895 Static Code Injection in microweber/microweber
- CVE-2022-0894 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0893 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0892 Export All URLs < 4.2 - Reflected Cross-Site Scripting
- CVE-2022-0891 Memory corruption in libtiff
- CVE-2022-0890 NULL Pointer Dereference in mruby/mruby
- CVE-2022-0889 Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
- CVE-2022-0888 Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
- CVE-2022-0887 Easy Social Icons < 3.1.4 - Admin+ SQL Injection
- CVE-2022-0885 Member Hero <= 1.0.9 - Unauthenticated RCE
- CVE-2022-0884 Profile Builder < 3.6.8 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0883 Windows Unquoted/Trusted Service Paths
- CVE-2022-0882 Illegal access to Kernel log in Fuchsia
- CVE-2022-0881 Insecure Storage of Sensitive Information in chocobozzz/peertube
- CVE-2022-0880 Cross-site Scripting (XSS) - Stored in star7th/showdoc
- CVE-2022-0879 Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting
- CVE-2022-0878 Novel attack against the Combined Charging System (CCS) in electric vehicles to remotely cause a denial of service
- CVE-2022-0877 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
- CVE-2022-0876 Social comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0875 miniOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site Scripting
- CVE-2022-0874 WP Social Buttons <= 2.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0873 Gmedia Photo Gallery < 1.20.0 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0871 Missing Authorization in gogs/gogs
- CVE-2022-0870 Server-Side Request Forgery (SSRF) in gogs/gogs
- CVE-2022-0869 Multiple Open Redirect in nitely/spirit
- CVE-2022-0868 Open Redirect in medialize/uri.js
- CVE-2022-0867 ARPrice Lite < 3.6.1 - Unauthenticated SQLi