2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47015 | MEDIUM | 6.5 | 1.5% | Jan 20, 2023 | MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbas... |
| CVE-2022-45558 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary co... |
| CVE-2022-45557 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary co... |
| CVE-2022-45542 | MEDIUM | 5.4 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing an... |
| CVE-2022-45541 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the v... |
| CVE-2022-45540 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value conta... |
| CVE-2022-45539 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new f... |
| CVE-2022-45538 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_GOBACK_URL". |
| CVE-2022-45537 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_LIST_URL". |
| CVE-2022-41733 | MEDIUM | 5.3 | 0.7% | Jan 20, 2023 | IBM InfoSphere Information Server 11.7 could allow a remote attacked to cause some of the components to be unusable unt... |
| CVE-2022-39193 | MEDIUM | 5.3 | 0.6% | Jan 20, 2023 | An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension ca... |
| CVE-2022-35977 | MEDIUM | 5.5 | 11.8% | Jan 20, 2023 | Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SETRANGE` and `SORT... |
| CVE-2022-38110 | MEDIUM | 5.4 | 0.4% | Jan 20, 2023 | In Database Performance Analyzer (DPA) 2022.4 and older releases, certain URL vectors are susceptible to authenticated r... |
| CVE-2022-43704 | MEDIUM | 5.9 | 1.9% | Jan 20, 2023 | The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requireme... |
| CVE-2022-43959 | MEDIUM | 4.9 | 1.0% | Jan 20, 2023 | Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remot... |
| CVE-2022-41441 | MEDIUM | 6.1 | 5.3% | Jan 20, 2023 | Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts o... |
| CVE-2022-20967 | MEDIUM | 5.4 | 0.5% | Jan 20, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2022-20966 | MEDIUM | 5.4 | 27.6% | Jan 20, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2022-20965 | MEDIUM | 5.4 | 0.6% | Jan 20, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2022-31901 | MEDIUM | 6.5 | 1.3% | Jan 19, 2023 | Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the appli... |
| CVE-2022-46890 | MEDIUM | 4.3 | 0.6% | Jan 19, 2023 | Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is ... |
| CVE-2022-46889 | MEDIUM | 5.4 | 60.1% | Jan 19, 2023 | A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to... |
| CVE-2022-46888 | MEDIUM | 6.1 | 1.5% | Jan 19, 2023 | Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to injec... |
| CVE-2022-47197 | MEDIUM | 5.4 | 1.0% | Jan 19, 2023 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins... |
| CVE-2022-47196 | MEDIUM | 5.4 | 0.7% | Jan 19, 2023 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now