Menu

Star on GitHub · 3.2k

2022

25,043 vulnerabilities published in 2022.

Results

10,650 of 25,043· Page 21/213
5.9
CVE-2022-45478

Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (

6.4
CVE-2022-45315

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerabi

6.7
CVE-2022-32634

In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation o

6.7
CVE-2022-32633

In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privi

6.7
CVE-2022-32632

In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation

6.7
CVE-2022-32631

In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation

6.7
CVE-2022-32630

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead t

6.7
CVE-2022-32629

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2022-32628

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2022-32626

In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio

6.7
CVE-2022-32625

In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio

6.7
CVE-2022-32624

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead t

6.7
CVE-2022-32622

In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privi

6.4
CVE-2022-32621

In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg

6.7
CVE-2022-32620

In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wit

6.7
CVE-2022-32619

In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala

6.7
CVE-2022-32598

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

6.7
CVE-2022-32597

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

6.7
CVE-2022-32596

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

6.7
CVE-2022-32594

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

5.4
CVE-2022-45824

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.

4.7
CVE-2022-4282

A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functional

6.3
CVE-2022-4281

A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown f

5.3
CVE-2022-43504

Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to o

6.1
CVE-2022-43500

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inje

5.4
CVE-2022-43499

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker

6.1
CVE-2022-43497

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inje

6.1
CVE-2022-43487

Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacke

6.1
CVE-2022-43479

Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users t

4.6
CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow

4.8
CVE-2022-41830

Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated

6.5
CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-ad

6.5
CVE-2022-41798

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may all

4.8
CVE-2022-40968

Reflected Cross-Site Scripting (XSS) vulnerability in 2kb Amazon Affiliates Store plugin <=2.1.5 on WordPress.

4.3
CVE-2022-35730

Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky header plugin <= 1.0.8 on WordPress.

6.1
CVE-2022-46391

AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper che

4.3
CVE-2022-4280

A vulnerability, which was classified as problematic, has been found in Dot Tech Smart Campus System. Affected by this i

4.7
CVE-2022-4278

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This is

6.3
CVE-2022-4277

A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability

6.3
CVE-2022-4276

A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown func

6.3
CVE-2022-4275

A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an u

6.3
CVE-2022-4274

A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of

6.5
CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server ca

6.3
CVE-2022-4272

A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown

5.4
CVE-2022-4220

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.

5.4
CVE-2022-4219

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.

5.4
CVE-2022-4218

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.

5.5
CVE-2022-4217

The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key' parameter in versio

5.5
CVE-2022-4216

The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook_appid' parameter in

6.1
CVE-2022-4215

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date' parameter on the 'c

Test your stack for 2022issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.