Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 426 of 437.
- CVE-2022-0866 Race condition in Wildfly
- CVE-2022-0865 Denial of service in libtiff
- CVE-2022-0864 UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting
- CVE-2022-0863 WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)
- CVE-2022-0862 ePO password change vulnerability
- CVE-2022-0861 ePO XML extended entity vulnerability
- CVE-2022-0860 Improper Authorization in cobbler/cobbler
- CVE-2022-0859 ePO database restoration vulnerability
- CVE-2022-0858 Cross-site scripting vulnerability in ePO
- CVE-2022-0857 ePO Reflected Cross-site scripting vulnerability
- CVE-2022-0856 Denial of service in libcaca
- CVE-2022-0855 Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin
- CVE-2022-0854 Information disclosure in Kernel
- CVE-2022-0853 Denial of service in jboss-client
- CVE-2022-0852 Information disclosure in convert2rhel
- CVE-2022-0851 Information disclosure in convert2rhel
- CVE-2022-0850 Information disclosure in kernel
- CVE-2022-0849 Use After Free in r_reg_get_name_idx in radareorg/radare2
- CVE-2022-0848 OS Command Injection in part-db/part-db
- CVE-2022-0847 Linux Kernel Privilege Escalation
- CVE-2022-0846 SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQLi
- CVE-2022-0845 Code Injection in pytorchlightning/pytorch-lightning
- CVE-2022-0843 Memory corruption in Firefox
- CVE-2022-0842 ePO blind SQL Injection vulnerability
- CVE-2022-0841 OS Command Injection in ljharb/npm-lockfile
- CVE-2022-0840 Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add icon
- CVE-2022-0839 Improper Restriction of XML External Entity Reference in liquibase/liquibase
- CVE-2022-0838 Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp
- CVE-2022-0837 Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure
- CVE-2022-0836 SEMA API < 4.02 - Unauthenticated SQLi
- CVE-2022-0835 AVEVA System Platform Cleartext Storage of Sensitive Information in Memory
- CVE-2022-0834 Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
- CVE-2022-0833 Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure
- CVE-2022-0832 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0831 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0830 FormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF
- CVE-2022-0829 Improper Authorization in webmin/webmin
- CVE-2022-0828 Download Manager < 3.2.39 - Unauthenticated brute force of files master key
- CVE-2022-0827 Bestbooks <= 2.6.3 - Unauthenticated SQLi
- CVE-2022-0826 WP Video Gallery <= 1.7.1 - Unauthenticated SQLi
- CVE-2022-0825 Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update
- CVE-2022-0824 Improper Access Control to Remote Code Execution in webmin/webmin
- CVE-2022-0823 Information disclosure in Zyxel GS1200 series firmware
- CVE-2022-0822 Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore
- CVE-2022-0821 Improper Authorization in orchardcms/orchardcore
- CVE-2022-0820 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
- CVE-2022-0819 Code Injection in dolibarr/dolibarr
- CVE-2022-0818 Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS
- CVE-2022-0817 BadgeOS <= 3.7.0 - Unauthenticated SQLi
- CVE-2022-0815 McAfee WebAdvisor - Extension Fingerprinting vulnerability
- CVE-2022-0814 Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi
- CVE-2022-0813 PhpMyAdmin exposure of sensitive information
- CVE-2022-0812 Information disclosure in Kernel
- CVE-2022-0811 Code Injection in CRI-O
- CVE-2022-0809 Memory corruption in Chrome
- CVE-2022-0808 Use after free in Chrome
- CVE-2022-0807 Security feature bypass in Chrome
- CVE-2022-0806 Information disclosure in Chrome
- CVE-2022-0805 Use after free in Chrome
- CVE-2022-0804 Security feature bypass in Chrome
- CVE-2022-0803 Security feature bypass in Chrome
- CVE-2022-0802 Security feature bypass in Chrome
- CVE-2022-0801 Cross-site scripting in Chrome
- CVE-2022-0800 Memory corruption in Chrome
- CVE-2022-0799 Privilege escalation in Chrome
- CVE-2022-0798 Use after free in Chrome
- CVE-2022-0797 Memory corruption in Chrome
- CVE-2022-0796 Use after free in Chrome
- CVE-2022-0795 Memory corruption in Chrome
- CVE-2022-0794 Use after free in Chrome
- CVE-2022-0793 Use after free in Chrome
- CVE-2022-0792 Memory corruption in Chrome
- CVE-2022-0791 Use after free in Chrome
- CVE-2022-0790 Use after free in Chrome
- CVE-2022-0789 Memory corruption in Chrome
- CVE-2022-0788 WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi
- CVE-2022-0787 Limit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLi
- CVE-2022-0786 KiviCare < 2.3.9 - Unauthenticated SQLi
- CVE-2022-0785 Daily Prayer Time < 2022.03.01 - Unauthenticated SQLi
- CVE-2022-0784 Title Experiments Free < 9.0.1 - Unauthenticated SQLi
- CVE-2022-0783 Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi
- CVE-2022-0782 Donations <= 1.8 - Unauthenticated SQLi
- CVE-2022-0781 Nirweb support < 2.8.2 - Unauthenticated SQLi
- CVE-2022-0780 SearchIQ < 3.9 - Unauthenticated Stored XSS
- CVE-2022-0779 User Meta < 2.4.4 - Subscriber+ Local File Enumeration via Path Traversal
- CVE-2022-0778 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- CVE-2022-0777 Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber
- CVE-2022-0776 Cross-site Scripting (XSS) - DOM in hakimel/reveal.js
- CVE-2022-0775 WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
- CVE-2022-0773 Documentor <= 1.5.3 - Unauthenticated SQLi
- CVE-2022-0772 Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-0771 SiteSuperCharger < 5.2.0 - Unauthenticated SQLi
- CVE-2022-0770 Translate WordPress with GTranslate < 2.9.9 - CSRF to Account Takeover
- CVE-2022-0769 Users Ultra <= 3.1.0 - Unauthenticated SQL Injection
- CVE-2022-0768 Server-Side Request Forgery (SSRF) in rudloff/alltube
- CVE-2022-0767 Server-Side Request Forgery (SSRF) in janeczku/calibre-web
- CVE-2022-0766 Server-Side Request Forgery (SSRF) in janeczku/calibre-web
- CVE-2022-0765 Loco Translate < 2.6.1 - Authenticated Stored Cross-Site Scripting
- CVE-2022-0764 Arbitrary Command Injection in strapi/strapi
- CVE-2022-0763 Cross-site Scripting (XSS) - Stored in microweber/microweber