2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47195 | MEDIUM | 5.4 | 0.7% | Jan 19, 2023 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins... |
| CVE-2022-47194 | MEDIUM | 5.4 | 0.8% | Jan 19, 2023 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins... |
| CVE-2022-40697 | MEDIUM | 4.8 | 0.4% | Jan 19, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 3com – Asesor de Cookies para normativa española plugi... |
| CVE-2022-39167 | MEDIUM | 5.9 | 0.6% | Jan 19, 2023 | IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information... |
| CVE-2022-3738 | MEDIUM | 5.9 | 0.6% | Jan 19, 2023 | The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file mi... |
| CVE-2022-4892 | MEDIUM | 6.1 | 0.5% | Jan 19, 2023 | A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function build_view of the f... |
| CVE-2022-4235 | MEDIUM | 5.4 | 0.6% | Jan 18, 2023 | RushBet version 2022.23.1-b490616d allows a remote attacker to steal customer accounts via use of a malicious applicatio... |
| CVE-2022-45613 | MEDIUM | 5.4 | 0.5% | Jan 18, 2023 | Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index... |
| CVE-2022-47950 | MEDIUM | 6.5 | 1.0% | Jan 18, 2023 | An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML fil... |
| CVE-2022-3100 | MEDIUM | 5.9 | 0.4% | Jan 18, 2023 | A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when ... |
| CVE-2022-47881 | MEDIUM | 6.5 | 0.7% | Jan 18, 2023 | Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability. |
| CVE-2022-45103 | MEDIUM | 6.5 | 0.7% | Jan 18, 2023 | Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information ... |
| CVE-2022-34436 | MEDIUM | 4.9 | 0.5% | Jan 18, 2023 | Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware... |
| CVE-2022-34435 | MEDIUM | 4.9 | 0.5% | Jan 18, 2023 | Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware... |
| CVE-2022-47917 | MEDIUM | 6.5 | 0.7% | Jan 18, 2023 | Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to imprope... |
| CVE-2022-43455 | MEDIUM | 6.5 | 0.6% | Jan 18, 2023 | Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to imprope... |
| CVE-2022-46660 | MEDIUM | 6.5 | 0.6% | Jan 18, 2023 | An unauthorized user could alter or write files with full control over the path and content of the file. |
| CVE-2022-43494 | MEDIUM | 6.5 | 0.5% | Jan 18, 2023 | An unauthorized user could be able to read any file on the system, potentially exposing sensitive information. ... |
| CVE-2022-39429 | MEDIUM | 4.3 | 0.6% | Jan 18, 2023 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c... |
| CVE-2022-47929 | MEDIUM | 5.5 | 1.0% | Jan 17, 2023 | In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged... |
| CVE-2022-39195 | MEDIUM | 6.1 | 6.3% | Jan 17, 2023 | A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary ... |
| CVE-2022-2907 | MEDIUM | 6.5 | 0.9% | Jan 17, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions start... |
| CVE-2022-37436 | MEDIUM | 5.3 | 57.9% | Jan 17, 2023 | Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting ... |
| CVE-2022-40704 | MEDIUM | 6.1 | 0.6% | Jan 17, 2023 | A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite. |
| CVE-2022-4121 | MEDIUM | 5.5 | 0.5% | Jan 17, 2023 | In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now