Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 428 of 437.
- CVE-2022-0657 5 Stars Rating Funnel < 1.2.53 - Unauthenticated SQLi
- CVE-2022-0656 uDraw < 3.3.3 - Unauthenticated Arbitrary File Access
- CVE-2022-0654 Exposure of Sensitive Information to an Unauthorized Actor in fgribreau/node-request-retry
- CVE-2022-0653 Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting
- CVE-2022-0652 Information disclosure in Sophos UTM
- CVE-2022-0651 WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type
- CVE-2022-0650 Memory corruption in TL-WR940N
- CVE-2022-0649 Adrotate < 5.8.23 - Admin+ XSS via Group Name
- CVE-2022-0648 Team Circle Image Slider With Lightbox < 1.0.16 - Reflected Cross-Site Scripting
- CVE-2022-0647 Bulk Creator <= 1.0.1 - Reflected Cross-Site Scripting
- CVE-2022-0646 Use after free in Kernel
- CVE-2022-0645 Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in posthog/posthog
- CVE-2022-0643 Bank Mellat <= 1.3.7 - Reflected Cross-Site Scripting
- CVE-2022-0642 JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRF
- CVE-2022-0641 Popup Like box < 3.6.1 - Reflected Cross-Site Scripting
- CVE-2022-0640 AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting
- CVE-2022-0639 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
- CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber
- CVE-2022-0637 open redirect in pollbot
- CVE-2022-0636 Memory corruption in Thin Installer
- CVE-2022-0635 Denial of service in BIND
- CVE-2022-0634 ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
- CVE-2022-0633 UpdraftPlus Free < 1.22.3 & Premium < 2.22.3 - Subscriber+ Backup Download
- CVE-2022-0632 NULL Pointer Dereference in mruby/mruby
- CVE-2022-0631 Heap-based Buffer Overflow in mruby/mruby
- CVE-2022-0630 Out-of-bounds Read in mruby/mruby
- CVE-2022-0629 Stack-based Buffer Overflow in vim/vim
- CVE-2022-0628 AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting
- CVE-2022-0627 Amelia < 1.0.46 - Reflected Cross-Site Scripting
- CVE-2022-0626 Advanced Admin Search < 1.1.6 - Reflected Cross-Site Scripting
- CVE-2022-0625 Admin Menu Editor <= 1.0.4 - Reflected Cross-Site Scripting
- CVE-2022-0624 Authorization Bypass Through User-Controlled Key in ionicabizau/parse-path
- CVE-2022-0623 Out-of-bounds Read in mruby/mruby
- CVE-2022-0622 Generation of Error Message Containing Sensitive Information in snipe/snipe-it
- CVE-2022-0621 dTabs <= 1.4 - Reflected Cross-Site Scripting
- CVE-2022-0620 Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting
- CVE-2022-0619 Database Peek <= 1.2 - Reflected Cross-Site Scripting
- CVE-2022-0618 Denial of service via HTTP/2 HEADERS frames padding
- CVE-2022-0617 Null dereference in Kernel
- CVE-2022-0616 Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF
- CVE-2022-0615 Use-after-free vulnerability in ESET products for Linux
- CVE-2022-0614 Use of Out-of-range Pointer Offset in mruby/mruby
- CVE-2022-0613 Authorization Bypass Through User-Controlled Key in medialize/uri.js
- CVE-2022-0612 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0611 Missing Authorization in snipe/snipe-it
- CVE-2022-0610 Memory corruption in Chrome
- CVE-2022-0609 Google Chromium Animation Use-After-Free
- CVE-2022-0608 Integer overflow in Chrome
- CVE-2022-0607 Use after free in Chrome
- CVE-2022-0606 Use after free in Chrome
- CVE-2022-0605 Use after free in Chrome
- CVE-2022-0604 Memory corruption in Chrome
- CVE-2022-0603 Use after free in Chrome
- CVE-2022-0602 Cross-site Scripting (XSS) - DOM in tastyigniter/tastyigniter
- CVE-2022-0601 Countdown & Clock < 2.2.9 - Reflected Cross-Site Scripting
- CVE-2022-0600 Conference Scheduler < 2.4.3 - Reflected Cross-Site Scripting
- CVE-2022-0599 Mapping Multiple URLs Redirect Same Page <= 5.8 - Reflected Cross-Site Scripting
- CVE-2022-0598 Login with phone number < 1.3.8 - Multiple Admin+ Stored XSS
- CVE-2022-0597 Open Redirect in microweber/microweber
- CVE-2022-0596 Improper Validation of Specified Quantity in Input in microweber/microweber
- CVE-2022-0595 Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS
- CVE-2022-0594 Shareaholic < 9.7.6 - Information Disclosure
- CVE-2022-0593 Login with phone number < 1.3.7 - Unauthenticated remote plugin deletion
- CVE-2022-0592 MapSVG < 6.2.20 - Unauthenticated SQLi
- CVE-2022-0591 Formcraft3 < 3.8.28 - Unauthenticated SSRF
- CVE-2022-0590 BulletProof Security < 5.8 - Admin+ Stored Cross-Site Scripting (XSS)
- CVE-2022-0589 Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-0588 Missing Authorization in librenms/librenms
- CVE-2022-0587 Improper Authorization in librenms/librenms
- CVE-2022-0586 Denial of service in Wireshark
- CVE-2022-0585 Denial of service in Wireshark
- CVE-2022-0583 Memory corruption in Wireshark
- CVE-2022-0582 Null dereference in Wireshark
- CVE-2022-0581 Use after free in Wireshark
- CVE-2022-0580 Incorrect Authorization in librenms/librenms
- CVE-2022-0579 Missing Authorization in snipe/snipe-it
- CVE-2022-0578 Code Injection in publify/publify
- CVE-2022-0577 Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy
- CVE-2022-0576 Cross-site Scripting (XSS) - Generic in librenms/librenms
- CVE-2022-0575 Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-0574 Improper Access Control in publify/publify
- CVE-2022-0573 Deserialization in JFrog Artifactory
- CVE-2022-0572 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0571 Cross-site Scripting (XSS) - Reflected in phoronix-test-suite/phoronix-test-suite
- CVE-2022-0570 Heap-based Buffer Overflow in mruby/mruby
- CVE-2022-0569 Observable Discrepancy in snipe/snipe-it
- CVE-2022-0567 Security feature bypass in ovn-kubernetes
- CVE-2022-0566 Memory corruption in Thunderbird
- CVE-2022-0565 Cross-site Scripting in pimcore/pimcore
- CVE-2022-0564 Qlik Sense Enterprise Domain User enumeration
- CVE-2022-0563 Information disclosure in util-linux
- CVE-2022-0562 Null dereference in libtiff
- CVE-2022-0561 Null dereference in libtiff
- CVE-2022-0560 Open Redirect in microweber/microweber
- CVE-2022-0559 Use After Free in radareorg/radare2
- CVE-2022-0558 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-0557 OS Command Injection in microweber/microweber
- CVE-2022-0556 Privilege escalation in Zyxel AP Configurator (ZAC)
- CVE-2022-0555 Information disclosure in subiquity
- CVE-2022-0554 Use of Out-of-range Pointer Offset in vim/vim