Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 432 of 437.
- CVE-2022-0236 WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure
- CVE-2022-0235 Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch
- CVE-2022-0234 WOOCS < 1.3.7.5 - Reflected Cross-Site Scripting
- CVE-2022-0233 ProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 Authenticated Stored Cross-Site Scripting
- CVE-2022-0232 User Registration, Login & Landing Pages – LeadMagic <= 1.2.7 Admin+ Stored Cross-Site Scripting
- CVE-2022-0231 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
- CVE-2022-0230 Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting
- CVE-2022-0229 miniOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options Deletion
- CVE-2022-0228 Popup Builder < 4.0.7 - Admin+ SQL Injection
- CVE-2022-0226 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
- CVE-2022-0225 Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown
- CVE-2022-0224 SQL Injection in dolibarr/dolibarr
- CVE-2022-0223 Path traversal in EcoStruxure Power Commission
- CVE-2022-0222 Denial of service in Modicon M340 CPUs
- CVE-2022-0221 XML external entity in SCADAPack Workbench
- CVE-2022-0220 WordPress GDPR & CCPA < 1.9.27 - Unauthenticated Reflected Cross-Site Scripting
- CVE-2022-0219 Improper Restriction of XML External Entity Reference in skylot/jadx
- CVE-2022-0218 WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route
- CVE-2022-0217 XML external entity in prosody
- CVE-2022-0216 Use after free in QEMU
- CVE-2022-0215 XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update
- CVE-2022-0214 Popup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of Service
- CVE-2022-0213 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0212 SpiderCalendar <= 1.5.65 - Reflected Cross-Site Scripting
- CVE-2022-0211 Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0210 Random Banner <= 4.1.4 Admin+ Stored Cross-Site Scripting
- CVE-2022-0209 Mitsol Social Post Feed < 1.11 - Admin+ Stored Cross-Site Scripting
- CVE-2022-0208 MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting
- CVE-2022-0207 Race condition in vdsm
- CVE-2022-0206 NewStatPress < 1.3.6 - Reflected Cross-Site Scripting
- CVE-2022-0205 YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting
- CVE-2022-0204 Memory corruption in bluez
- CVE-2022-0203 Improper Access Control in crater-invoice/crater
- CVE-2022-0201 Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting
- CVE-2022-0200 Themify Portfolio Post < 1.1.7 - Reflected Cross-Site Scripting
- CVE-2022-0199 Coming soon and Maintenance mode < 3.6.8 - Arbitrary Email Sending to Subscribed Users via CSRF
- CVE-2022-0198 Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp
- CVE-2022-0197 Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite
- CVE-2022-0196 Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite
- CVE-2022-0194 Memory corruption in Netatalk
- CVE-2022-0193 Complianz - GDPR/CCPA Cookie Consent < 6.0.0 - Reflected Cross-Site Scripting
- CVE-2022-0192 Privilege escalation in PCManager
- CVE-2022-0191 Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF
- CVE-2022-0190 Ad Invalid Click Protector (AICP) < 1.2.6 - Authenticated SQL Injection
- CVE-2022-0189 WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)
- CVE-2022-0188 Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update
- CVE-2022-0186 Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting
- CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow
- CVE-2022-0184 Information disclosure in TEPRA PRO
- CVE-2022-0183 Information disclosure in MIRUPASS
- CVE-2022-0182 Cross-site scripting in Quiz And Survey Master
- CVE-2022-0181 Cross-site scripting in Quiz And Survey Master
- CVE-2022-0180 Cross-site request forgery in Quiz And Survey Master
- CVE-2022-0179 Missing Authorization in snipe/snipe-it
- CVE-2022-0178 Missing Authorization in snipe/snipe-it
- CVE-2022-0176 PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting
- CVE-2022-0175 Information disclosure in virglrenderer
- CVE-2022-0174 Improper Validation of Specified Quantity in Input in dolibarr/dolibarr
- CVE-2022-0173 Out-of-bounds Read in radareorg/radare2
- CVE-2022-0172 Security feature bypass in GitLab
- CVE-2022-0171 Denial of service in kernel
- CVE-2022-0170 Improper Access Control in chocobozzz/peertube
- CVE-2022-0169 Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection
- CVE-2022-0168 Null dereference in kernel
- CVE-2022-0167 Information disclosure in GitLab
- CVE-2022-0166 Privilege escalation vulnerability in McAfee Agent
- CVE-2022-0165 Page Builder KingComposer <= 2.9.6 - Open Redirect
- CVE-2022-0164 Coming soon and Maintenance mode < 3.6.7 - Subscriber+ Arbitrary Email Sending to Subscribed Users
- CVE-2022-0163 Smart Forms < 2.6.71 - Subscriber+ Form Data Download
- CVE-2022-0162 Vulnerability in TP-LinK TL-WR841N wireless router
- CVE-2022-0161 ARI Fancy Lightbox < 1.3.9 - Reflected Cross-Site Scripting
- CVE-2022-0159 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
- CVE-2022-0158 Heap-based Buffer Overflow in vim/vim
- CVE-2022-0157 Cross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suite
- CVE-2022-0156 Use After Free in vim/vim
- CVE-2022-0155 Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects
- CVE-2022-0154 Cross-site request forgery in GitLab
- CVE-2022-0153 SQL Injection in forkcms/forkcms
- CVE-2022-0152 Missing authorization in GitLab
- CVE-2022-0151 Denial of service in GitLab
- CVE-2022-0150 WP Accessibility Helper (WAH) < 0.6.0.7 - Reflected Cross-Site Scripting (XSS)
- CVE-2022-0149 WooCommerce – Store Exporter < 2.7.1 - Reflected Cross-Site Scripting (XSS)
- CVE-2022-0148 All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
- CVE-2022-0147 Cookie Information < 2.0.8 - Reflected Cross-Site Scripting
- CVE-2022-0145 Cross-site Scripting (XSS) - Stored in forkcms/forkcms
- CVE-2022-0144 Improper Privilege Management in shelljs/shelljs
- CVE-2022-0143 LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password
- CVE-2022-0142 Visual Form Builder < 3.0.6 - CSV Injection
- CVE-2022-0141 Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRF
- CVE-2022-0140 Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure
- CVE-2022-0139 Use After Free in radareorg/radare2
- CVE-2022-0138 Airspan Networks Mimosa Deserialization of Untrusted Data
- CVE-2022-0137 Memory corruption in htmldoc
- CVE-2022-0136 Server-side request forgery in GitLab
- CVE-2022-0135 Memory corruption in virglrenderer
- CVE-2022-0134 AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF
- CVE-2022-0133 Improper Access Control in chocobozzz/peertube
- CVE-2022-0132 Server-Side Request Forgery (SSRF) in chocobozzz/peertube
- CVE-2022-0131 Hardcoded credentials in Jimoty App for Android
- CVE-2022-0130 Code injection in Tenable.sc