Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 431 of 437.
- CVE-2022-0346 Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting
- CVE-2022-0345 Better Notifications for WP < 1.8.7 - Email Address Disclosure
- CVE-2022-0344 Information disclosure in GitLab
- CVE-2022-0343 Local Priviledge escalation in Perfetto Dev scripts
- CVE-2022-0342 Auth bypass in ATP series firmware
- CVE-2022-0341 Cross-site Scripting (XSS) - Stored in vanessa219/vditor
- CVE-2022-0339 Server-Side Request Forgery (SSRF) in janeczku/calibre-web
- CVE-2022-0338 Insertion of Sensitive Information into Log File in delgan/loguru
- CVE-2022-0337 Information disclosure in Chrome
- CVE-2022-0336 Security feature bypass in Samba
- CVE-2022-0335 Cross Site Request Forgery in Moodle
- CVE-2022-0334 Insufficient user authorization in Moodle
- CVE-2022-0333 Insufficient user authorization in Moodle
- CVE-2022-0332 SQL injection in Moodle
- CVE-2022-0331 Information disclosure in Sophos Firewall
- CVE-2022-0330 Memory corruption in kernel
- CVE-2022-0328 Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF
- CVE-2022-0327 Master Addons for Elementor < 1.8.2 - Reflected Cross-Site Scripting
- CVE-2022-0326 NULL Pointer Dereference in mruby/mruby
- CVE-2022-0324 Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)
- CVE-2022-0323 Improper Neutralization of Special Elements Used in a Template Engine in bobthecow/mustache.php
- CVE-2022-0322 Denial of service in kernel
- CVE-2022-0321 WP Voting Contest < 3.0 - Reflected Cross-Site Scripting
- CVE-2022-0320 Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
- CVE-2022-0319 Out-of-bounds Read in vim/vim
- CVE-2022-0318 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0317 Improper Input Validation in AKPublic.Verify in go-attestation
- CVE-2022-0316 Multiple themes - Unauthenticated Arbitrary File Upload
- CVE-2022-0315 Insecure Temporary File in horovod/horovod
- CVE-2022-0314 Nimble Page Builder < 3.2.2 - Reflected Cross-Site Scripting
- CVE-2022-0313 Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF
- CVE-2022-0311 Memory corruption in Chrome
- CVE-2022-0310 Memory corruption in Chrome
- CVE-2022-0309 Security feature bypass in Chrome
- CVE-2022-0308 Use after free in Chrome
- CVE-2022-0307 Use after free in Chrome
- CVE-2022-0306 Memory corruption in Chrome
- CVE-2022-0305 Security feature bypass in Chrome
- CVE-2022-0304 Use after free in Chrome
- CVE-2022-0302 Use after free in Chrome
- CVE-2022-0301 Use after free in Chrome
- CVE-2022-0300 Use after free in Chrome
- CVE-2022-0298 Use after free in Chrome
- CVE-2022-0297 Use after free in Chrome
- CVE-2022-0296 Use after free in Chrome
- CVE-2022-0295 Use after free in Chrome
- CVE-2022-0294 Security feature bypass in Chrome
- CVE-2022-0293 Use after free in Chrome
- CVE-2022-0292 Security feature bypass in Chrome
- CVE-2022-0291 Security feature bypass in Chrome
- CVE-2022-0290 Use after free in Chrome
- CVE-2022-0289 Use after free in Chrome
- CVE-2022-0288 Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting
- CVE-2022-0287 Mycred < 2.4.4.1 - Subscriber+ User E-mail Addresses Disclosure
- CVE-2022-0286 Null dereference in linux:linux kernel
- CVE-2022-0285 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0284 Memory corruption in ImageMagick
- CVE-2022-0283 Open redirect in GitLab
- CVE-2022-0282 Cross-site Scripting in microweber/microweber
- CVE-2022-0281 Exposure of Sensitive Information to an Unauthorized Actor in microweber/microweber
- CVE-2022-0280 McAfee Total Protection (MTP) - File Deletion vulnerability
- CVE-2022-0279 AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition
- CVE-2022-0278 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-0277 Incorrect Permission Assignment for Critical Resource in microweber/microweber
- CVE-2022-0274 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
- CVE-2022-0273 Improper Access Control in janeczku/calibre-web
- CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt
- CVE-2022-0271 LearnPress < 4.1.6 - Reflected Cross-Site Scripting
- CVE-2022-0270 Improper header sanitization in bored-agent causes escalation of privilege
- CVE-2022-0269 Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm
- CVE-2022-0268 Cross-site Scripting (XSS) - Stored in getgrav/grav
- CVE-2022-0267 AdRotate < 5.8.22 - Admin+ SQL Injection
- CVE-2022-0266 Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat
- CVE-2022-0265 Improper Restriction of XML External Entity Reference in hazelcast/hazelcast
- CVE-2022-0264 Information disclosure in kernel
- CVE-2022-0263 Unrestricted Upload of File with Dangerous Type in pimcore/pimcore
- CVE-2022-0262 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0261 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0260 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0258 SQL Injection in pimcore/pimcore
- CVE-2022-0257 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0256 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0255 Database Backup for WordPress < 2.5.1 - Admin+ SQL Injection
- CVE-2022-0254 Zero Spam < 5.2.11 - Admin+ SQL Injection
- CVE-2022-0253 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2022-0252 Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool
- CVE-2022-0251 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0250 Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting
- CVE-2022-0249 Server-side request forgery in GitLab
- CVE-2022-0248 Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSS
- CVE-2022-0247 Write access to VMO data through copy-on-write in Fuchsia
- CVE-2022-0246 iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
- CVE-2022-0245 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
- CVE-2022-0244 Path traversal in GitLab
- CVE-2022-0243 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
- CVE-2022-0242 Unrestricted Upload of File with Dangerous Type in crater-invoice/crater
- CVE-2022-0240 NULL Pointer Dereference in mruby/mruby
- CVE-2022-0239 Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp
- CVE-2022-0238 Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite
- CVE-2022-0237 Rapid7 Insight Agent Privilege Escalation