Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 427 of 437.
- CVE-2022-0762 Incorrect Authorization in microweber/microweber
- CVE-2022-0760 Simple Link Directory < 7.7.2 - Unauthenticated SQL injection
- CVE-2022-0759 Improper Certificate Validation in kubeclient
- CVE-2022-0758 Rapid7 Nexpose Reflected XSS
- CVE-2022-0757 Rapid7 Nexpose SQL Injection
- CVE-2022-0756 Missing Authorization in salesagility/suitecrm
- CVE-2022-0755 Missing Authorization in salesagility/suitecrm
- CVE-2022-0754 SQL Injection in salesagility/suitecrm
- CVE-2022-0753 Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp
- CVE-2022-0752 Cross-site Scripting (XSS) - Generic in hestiacp/hestiacp
- CVE-2022-0751 Other in GitLab
- CVE-2022-0750 Photoswipe Masonry Gallery <= 1.2.14 Stored Cross-Site Scripting
- CVE-2022-0749 Deserialization of Untrusted Data
- CVE-2022-0748 Arbitrary Code Execution
- CVE-2022-0747 Infographic Maker - iList < 4.3.8 - Unauthenticated SQL Injection
- CVE-2022-0746 Business Logic Errors in dolibarr/dolibarr
- CVE-2022-0745 Like Button Rating < 2.6.45 - Arbitrary e-mail Sending
- CVE-2022-0743 Cross-site Scripting (XSS) - Stored in getgrav/grav
- CVE-2022-0742 Memory leak in ICMP6 in Linux Kernel
- CVE-2022-0741 Information disclosure in GitLab
- CVE-2022-0740 Missing authorization in GitLab
- CVE-2022-0739 BookingPress < 1.0.11 - Unauthenticated SQL Injection
- CVE-2022-0738 Information disclosure in GitLab
- CVE-2022-0737 Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0736 Insecure Temporary File in mlflow/mlflow
- CVE-2022-0735 Information disclosure in GitLab
- CVE-2022-0734 Cross-site scripting in ATP series firmware
- CVE-2022-0732 Missing authorization in Copy9
- CVE-2022-0731 Improper Access Control (IDOR) in dolibarr/dolibarr
- CVE-2022-0730 Auth bypass in Cati
- CVE-2022-0729 Use of Out-of-range Pointer Offset in vim/vim
- CVE-2022-0728 Easy Smooth Scroll Links < 2.23.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0727 Improper Access Control in chocobozzz/peertube
- CVE-2022-0726 Missing Authorization in chocobozzz/peertube
- CVE-2022-0725 Information disclosure in keepass
- CVE-2022-0724 Insecure Storage of Sensitive Information in microweber/microweber
- CVE-2022-0723 Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-0722 Exposure of Sensitive Information to an Unauthorized Actor in ionicabizau/parse-url
- CVE-2022-0721 Insertion of Sensitive Information Into Debugging Code in microweber/microweber
- CVE-2022-0720 Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure
- CVE-2022-0719 Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-0718 python-oslo-utils has improper password parsing
- CVE-2022-0717 Out-of-bounds Read in mruby/mruby
- CVE-2022-0715 Auth bypass in APC Smart-UPS
- CVE-2022-0714 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0713 Heap-based Buffer Overflow in radareorg/radare2
- CVE-2022-0712 NULL Pointer Dereference in radareorg/radare2
- CVE-2022-0711 Denial of service in haproxy
- CVE-2022-0710 Header Footer Code Manager <= 1.1.16 Reflected XSS
- CVE-2022-0709 Booking Package < 1.5.29 - Unauthenticated Sensitive Data Disclosure
- CVE-2022-0708 Team Creator's Email Address is disclosed to Team Members via one of the APIs
- CVE-2022-0707 Easy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRF
- CVE-2022-0706 Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0705 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0704 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0703 GD Mylist <= 1.1.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0702 Petfinder Listings <= 1.0.18 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0701 SEO 301 Meta <= 1.9.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0700 Simple Theme Options < 1.7 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0699 Memory corruption in shapelib
- CVE-2022-0698 Microweber vulnerable to cross-site scripting (XSS)
- CVE-2022-0697 Open Redirect in archivy/archivy
- CVE-2022-0696 NULL Pointer Dereference in vim/vim
- CVE-2022-0695 Denial of Service in radareorg/radare2
- CVE-2022-0694 Advanced Booking Calendar < 1.7.0 - Unauthenticated SQL Injection
- CVE-2022-0693 Master Elements <= 8.0 - Unauthenticated SQLi
- CVE-2022-0692 Open Redirect on Rudloff/alltube in rudloff/alltube
- CVE-2022-0691 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
- CVE-2022-0690 Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-0689 Use multiple time the one-time coupon in microweber/microweber
- CVE-2022-0688 Business Logic Errors in microweber/microweber
- CVE-2022-0687 Amelia < 1.0.46 - Manager+ RCE
- CVE-2022-0686 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
- CVE-2022-0685 Use of Out-of-range Pointer Offset in vim/vim
- CVE-2022-0684 WP Home Page Menu < 3.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0683 Essential Addons for Elementor Lite <= 5.0.8 Reflected Cross-Site Scripting
- CVE-2022-0681 Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF
- CVE-2022-0680 Plezi < 1.0.3 - Unauthenticated Stored XSS
- CVE-2022-0679 Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE
- CVE-2022-0678 Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-0677 Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)
- CVE-2022-0676 Heap-based Buffer Overflow in radareorg/radare2
- CVE-2022-0675 Puppet Firewall Module May Leave Unmanaged Rules
- CVE-2022-0674 Kunze Law < 2.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0673 Path Traversal in LemMinX
- CVE-2022-0672 Exposure of Sensitive Information to an Unauthorized Actor in LemMinX
- CVE-2022-0671 Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX
- CVE-2022-0670 Missing authorization in Ceph
- CVE-2022-0669 Denial of service in DPDK
- CVE-2022-0668 Auth bypass in JFrog Artifactory
- CVE-2022-0667 Assertion failure on delayed DS lookup
- CVE-2022-0666 CRLF Injection in microweber
- CVE-2022-0665 Path Traversal in pimcore/pimcore
- CVE-2022-0664 Use of Hard-coded Cryptographic Key in gravitl/netmaker
- CVE-2022-0663 Print, PDF, Email by PrintFriendly < 5.2.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0662 Adrotate < 5.8.23 - Admin+ XSS via Advert Name
- CVE-2022-0661 Ad Injection <= 1.2.0.19 - Admin+ Stored Cross-Site Scripting & RCE
- CVE-2022-0660 Generation of Error Message Containing Sensitive Information in microweber/microweber
- CVE-2022-0659 Sync iCloud COS < 2.0.1 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0658 CommonsBooking < 2.6.8 - Unauthenticated SQL Injection