Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 429 of 437.
- CVE-2022-0553 Possible to retrieve uncrypted firmware image
- CVE-2022-0552 Other in origin-aggregated-logging/elasticsearch
- CVE-2022-0551 Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0
- CVE-2022-0550 Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0
- CVE-2022-0549 Missing authorization in GitLab
- CVE-2022-0547 Auth bypass in OpenVPN
- CVE-2022-0546 Memory corruption in Blender
- CVE-2022-0545 Integer overflow in Blender
- CVE-2022-0544 Integer overflow in Blender
- CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape
- CVE-2022-0542 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
- CVE-2022-0541 Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover
- CVE-2022-0540 Auth bypass in Jira Core Server
- CVE-2022-0539 Cross-site Scripting (XSS) - Stored in ptrofimov/beanstalk_console
- CVE-2022-0538 DoS vulnerability in bundled XStream library in Jenkins Core
- CVE-2022-0537 MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution
- CVE-2022-0536 Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects
- CVE-2022-0535 E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)
- CVE-2022-0534 Memory corruption in htmldoc
- CVE-2022-0533 Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)
- CVE-2022-0532 Incorrect Permission Assignment for Critical Resource in CRI-O
- CVE-2022-0531 WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site Scripting
- CVE-2022-0530 Memory corruption in unzip
- CVE-2022-0529 Memory corruption in unzip
- CVE-2022-0528 Server-Side Request Forgery (SSRF) in transloadit/uppy
- CVE-2022-0527 Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
- CVE-2022-0526 Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
- CVE-2022-0525 Out-of-bounds Read in mruby/mruby
- CVE-2022-0524 Business Logic Errors in publify/publify
- CVE-2022-0523 Use After Free in radareorg/radare2
- CVE-2022-0522 Access of Memory Location Before Start of Buffer in radareorg/radare2
- CVE-2022-0521 Access of Memory Location After End of Buffer in radareorg/radare2
- CVE-2022-0520 Use After Free in radareorg/radare2
- CVE-2022-0519 Buffer Access with Incorrect Length Value in radareorg/radare2
- CVE-2022-0518 Heap-based Buffer Overflow in radareorg/radare2
- CVE-2022-0517 Privilege escalation in Mozilla VPN
- CVE-2022-0516 Information disclosure in kernel
- CVE-2022-0515 Cross-Site Request Forgery (CSRF) in crater-invoice/crater
- CVE-2022-0514 Business Logic Errors in crater-invoice/crater
- CVE-2022-0513 WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason
- CVE-2022-0512 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
- CVE-2022-0511 Memory corruption in Firefox
- CVE-2022-0510 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2022-0509 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0508 Server-Side Request Forgery (SSRF) in chocobozzz/peertube
- CVE-2022-0507 Vulnerability: Authenticated SQL Injection in API
- CVE-2022-0506 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-0505 Cross-Site Request Forgery (CSRF) in microweber/microweber
- CVE-2022-0504 Generation of Error Message Containing Sensitive Information in microweber/microweber
- CVE-2022-0503 Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site Scripting
- CVE-2022-0502 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0501 Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console
- CVE-2022-0500 Memory corruption in kernel
- CVE-2022-0499 Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRF
- CVE-2022-0497 Memory corruption in openscad
- CVE-2022-0496 Memory corruption in openscad
- CVE-2022-0495 SQL Injection in KOHA
- CVE-2022-0494 Information disclosure in kernel
- CVE-2022-0493 String Locator < 2.5.0 - Admin+ Arbitrary File Read
- CVE-2022-0492 Linux Kernel Improper Authentication
- CVE-2022-0489 Denial of service in GitLab
- CVE-2022-0488 Denial of service in GitLab
- CVE-2022-0487 Use after free in kernel
- CVE-2022-0486 Privileged Command Injection Vulnerability in Fidelis Network and Deception
- CVE-2022-0485 Other in libnbd
- CVE-2022-0484 Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs
- CVE-2022-0483 Local privilege escalation due to insecure folder permissions
- CVE-2022-0482 Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments
- CVE-2022-0481 NULL Pointer Dereference in mruby/mruby
- CVE-2022-0480 Denial of service in kernel
- CVE-2022-0479 Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting
- CVE-2022-0478 Event Manager for WooCommerce < 3.5.8 - Contributor+ SQL Injection
- CVE-2022-0477 Denial of service in GitLab
- CVE-2022-0476 Denial of Service in radareorg/radare2
- CVE-2022-0475 Possible XSS attack via translation
- CVE-2022-0474 Disclosure of mail addresses
- CVE-2022-0473 Dynamic field error message is vulnerable to XSS
- CVE-2022-0472 Unrestricted Upload of File with Dangerous Type in jsdecena/laracom
- CVE-2022-0471 Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting
- CVE-2022-0470 Memory corruption in Chrome
- CVE-2022-0469 Use after free in Chrome
- CVE-2022-0468 Use after free in Chrome
- CVE-2022-0467 Security feature bypass in Chrome
- CVE-2022-0466 Security feature bypass in Chrome
- CVE-2022-0465 Use after free in Chrome
- CVE-2022-0464 Use after free in Chrome
- CVE-2022-0463 Use after free in Chrome
- CVE-2022-0462 Information disclosure in Chrome
- CVE-2022-0461 Security feature bypass in Chrome
- CVE-2022-0460 Use after free in Chrome
- CVE-2022-0459 Use after free in Chrome
- CVE-2022-0458 Use after free in Chrome
- CVE-2022-0457 Memory corruption in Chrome
- CVE-2022-0456 Use after free in Chrome
- CVE-2022-0455 Other in Chrome
- CVE-2022-0454 Memory corruption in Chrome
- CVE-2022-0453 Use after free in Chrome
- CVE-2022-0452 Use after free in Chrome
- CVE-2022-0451 Auth bypass in Dark SDK
- CVE-2022-0450 Menu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site Scripting