2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-48023 | MEDIUM | 4.3 | 0.4% | Feb 3, 2023 | Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of ... |
| CVE-2022-48022 | MEDIUM | 4.3 | 0.5% | Feb 3, 2023 | An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to vie... |
| CVE-2022-47131 | MEDIUM | 4.8 | 0.4% | Feb 3, 2023 | A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page. |
| CVE-2022-47130 | MEDIUM | 4.3 | 0.6% | Feb 3, 2023 | A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an... |
| CVE-2022-48140 | MEDIUM | 5.4 | 0.4% | Feb 2, 2023 | DedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /file_manage_view.... |
| CVE-2022-3560 | MEDIUM | 5.5 | 0.2% | Feb 2, 2023 | A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service ... |
| CVE-2022-43665 | MEDIUM | 5.5 | 0.3% | Feb 2, 2023 | A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-craft... |
| CVE-2022-2546 | MEDIUM | 4.7 | 1.2% | Feb 2, 2023 | The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the r... |
| CVE-2022-40268 | MEDIUM | 4.7 | 0.5% | Feb 2, 2023 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT2... |
| CVE-2022-37034 | MEDIUM | 5.3 | 0.9% | Feb 1, 2023 | In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to d... |
| CVE-2022-45783 | MEDIUM | 6.5 | 8.5% | Feb 1, 2023 | An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the do... |
| CVE-2022-3913 | MEDIUM | 5.3 | 0.3% | Feb 1, 2023 | Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177 fail to validate the certificate of the update server when ... |
| CVE-2022-37033 | MEDIUM | 6.5 | 0.8% | Feb 1, 2023 | In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to ... |
| CVE-2022-3083 | MEDIUM | 5.4 | 0.4% | Feb 1, 2023 | All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity... |
| CVE-2022-46934 | MEDIUM | 6.1 | 1.1% | Feb 1, 2023 | kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /control... |
| CVE-2022-47983 | MEDIUM | 5.4 | 0.4% | Feb 1, 2023 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2022-43922 | MEDIUM | 6.5 | 0.4% | Feb 1, 2023 | IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive infor... |
| CVE-2022-48094 | MEDIUM | 4.9 | 0.7% | Feb 1, 2023 | lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php. |
| CVE-2022-47715 | MEDIUM | 5.3 | 0.4% | Feb 1, 2023 | In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic. |
| CVE-2022-46756 | MEDIUM | 6.7 | 0.2% | Feb 1, 2023 | Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker coul... |
| CVE-2022-45102 | MEDIUM | 6.1 | 0.5% | Feb 1, 2023 | Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote ... |
| CVE-2022-45098 | MEDIUM | 5.5 | 0.1% | Feb 1, 2023 | Dell PowerScale OneFS, 9.0.0.x-9.4.0.x, contain a cleartext storage of sensitive information vulnerability in S3 compon... |
| CVE-2022-32482 | MEDIUM | 5.1 | 0.2% | Feb 1, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileg... |
| CVE-2022-45096 | MEDIUM | 6.5 | 0.5% | Feb 1, 2023 | Dell PowerScale OneFS, 8.2.0 through 9.3.0, contain an User Interface Security Issue. An unauthenticated remote user co... |
| CVE-2022-45095 | MEDIUM | 6.7 | 0.6% | Feb 1, 2023 | Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access loca... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now