Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 430 of 437.
- CVE-2022-0449 Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scripting
- CVE-2022-0448 CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0447 Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types
- CVE-2022-0446 Simple Banner < 2.12.0 - Admin+ Stored Cross Site Scripting
- CVE-2022-0445 WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF
- CVE-2022-0444 XCloner < 4.3.6 - Plugin Settings Reset
- CVE-2022-0443 Use After Free in vim/vim
- CVE-2022-0442 UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override
- CVE-2022-0441 MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
- CVE-2022-0440 Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
- CVE-2022-0439 Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection
- CVE-2022-0437 Cross-site Scripting (XSS) - DOM in karma-runner/karma
- CVE-2022-0436 Path Traversal in gruntjs/grunt
- CVE-2022-0435 Memory corruption in kernel
- CVE-2022-0434 Page Views Count < 2.4.15 - Unauthenticated SQL Injection
- CVE-2022-0433 Null dereference in kernel
- CVE-2022-0432 Prototype Pollution in mastodon/mastodon
- CVE-2022-0431 Google Pagespeed Insights < 4.0.4 - Reflected Cross-Site Scripting
- CVE-2022-0430 Exposure of Sensitive Information to an Unauthorized Actor in httpie/httpie
- CVE-2022-0429 WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Unauthenticated Stored Cross-Site Scripting
- CVE-2022-0428 Content Egg < 5.3.0 - Reflected Cross-Site Scripting
- CVE-2022-0427 Cross-site request forgery in GitLab
- CVE-2022-0426 Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
- CVE-2022-0425 Server-side request forgery in GitLab
- CVE-2022-0424 Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure
- CVE-2022-0423 3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting
- CVE-2022-0422 White Label MS < 2.2.9 - Reflected Cross-Site Scripting
- CVE-2022-0421 Five Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSS
- CVE-2022-0420 RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection
- CVE-2022-0419 NULL Pointer Dereference in radareorg/radare2
- CVE-2022-0418 Event List < 0.8.8 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0417 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0415 Remote Command Execution in uploading repository file in gogs/gogs
- CVE-2022-0414 Improper Validation of Specified Quantity in Input in dolibarr/dolibarr
- CVE-2022-0413 Use After Free in vim/vim
- CVE-2022-0412 TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
- CVE-2022-0411 Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL Injection
- CVE-2022-0410 WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection
- CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc
- CVE-2022-0408 Stack-based Buffer Overflow in vim/vim
- CVE-2022-0407 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0406 Improper Authorization in janeczku/calibre-web
- CVE-2022-0405 Improper Access Control in janeczku/calibre-web
- CVE-2022-0404 Material Design for Contact Form 7 <= 2.6.4 - Subscriber+ Arbitrary Settings Update leading to DoS
- CVE-2022-0403 Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/Deletion
- CVE-2022-0402 Superforms < 6.0.4 - Reflected Cross-Site Scripting
- CVE-2022-0401 Path Traversal in yuda-lyu/w-zip
- CVE-2022-0400 Memory corruption in kernel
- CVE-2022-0399 Advanced Product Labels for WooCommerce < 1.2.3.7 - Reflected Cross-Site Scripting
- CVE-2022-0398 ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation
- CVE-2022-0397 WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting
- CVE-2022-0396 DoS from specifically crafted TCP packets
- CVE-2022-0395 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0394 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0393 Out-of-bounds Read in vim/vim
- CVE-2022-0392 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0391 Code injection in python
- CVE-2022-0390 Missing authorization in GitLab
- CVE-2022-0389 WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0388 Interactive Medical Drawing of Human Body < 2.6 - Admin+ Stored XSS
- CVE-2022-0387 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0386 SQL injection in Sophos UTM
- CVE-2022-0385 Crazy Bone <= 0.6.0 - Unauthenticated Stored XSS
- CVE-2022-0384 Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure
- CVE-2022-0383 WP Review Slider < 11.0 - Admin+ SQL Injection
- CVE-2022-0382 Information disclosure in kernel
- CVE-2022-0381 Embed Swagger <= 1.0.0 Reflected Cross-Site Scripting
- CVE-2022-0380 Fotobook <= 3.2.3 Reflected Cross-Site Scripting
- CVE-2022-0379 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-0378 Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-0377 LearnPress < 4.1.5 - Arbitrary Image Renaming
- CVE-2022-0376 User Meta < 2.4.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0375 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0374 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0373 Missing authorization in GitLab
- CVE-2022-0372 Cross-site Scripting (XSS) - Stored in crater-invoice/crater
- CVE-2022-0371 Information disclosure in GitLab
- CVE-2022-0370 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0369 Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability
- CVE-2022-0368 Out-of-bounds Read in vim/vim
- CVE-2022-0367 Memory corruption in libmodbus
- CVE-2022-0366 SQL injection in capsule8:capsule8
- CVE-2022-0365 Ricon Mobile, Inc.
- CVE-2022-0364 Modern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site Scripting
- CVE-2022-0363 myCred < 2.4.4 - Subscriber+ Arbitrary Post Creation
- CVE-2022-0362 SQL Injection in star7th/showdoc
- CVE-2022-0361 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0360 WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0359 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0358 Privilege escalation in QEMU/virtiofsd
- CVE-2022-0357 Improper Quoting Path Issue in Bitdefender Total Security
- CVE-2022-0355 Improper Removal of Sensitive Information Before Storage or Transfer in feross/simple-get
- CVE-2022-0354 Privilege escalation in System Update
- CVE-2022-0353 Denial of service in Diagnostics
- CVE-2022-0352 Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web
- CVE-2022-0351 Access of Memory Location Before Start of Buffer in vim/vim
- CVE-2022-0350 Cross-site Scripting (XSS) - Stored in vanessa219/vditor
- CVE-2022-0349 NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection
- CVE-2022-0348 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0347 LoginPress < 1.5.12 - Reflected Cross-Site Scripting