2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36399 | HIGH | 7.5 | 0.4% | Dec 28, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BoxyStudio Booked - Appointment Booking for ... |
| CVE-2022-34268 | CRITICAL | 9.8 | 1.5% | Dec 25, 2023 | An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication,... |
| CVE-2022-34267 | CRITICAL | 9.8 | 42.2% | Dec 25, 2023 | An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all aut... |
| CVE-2022-43675 | MEDIUM | 6.1 | 0.4% | Dec 25, 2023 | An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn... |
| CVE-2022-41762 | MEDIUM | 6.1 | 0.4% | Dec 25, 2023 | An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manage... |
| CVE-2022-41761 | MEDIUM | 6.5 | 0.8% | Dec 25, 2023 | An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewl... |
| CVE-2022-41760 | MEDIUM | 6.5 | 0.8% | Dec 25, 2023 | An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Netwo... |
| CVE-2022-39822 | HIGH | 8.8 | 0.6% | Dec 25, 2023 | In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the... |
| CVE-2022-39820 | MEDIUM | 6.5 | 0.6% | Dec 25, 2023 | In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/... |
| CVE-2022-39818 | HIGH | 8.8 | 2.2% | Dec 25, 2023 | In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via ... |
| CVE-2022-39337 | HIGH | 7.5 | 1.1% | Dec 22, 2023 | Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-li... |
| CVE-2022-47532 | CRITICAL | 9.8 | 0.6% | Dec 22, 2023 | FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request. |
| CVE-2022-45377 | CRITICAL | 9.8 | 0.6% | Dec 21, 2023 | Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload ... |
| CVE-2022-44684 | MEDIUM | 6.5 | 1.5% | Dec 20, 2023 | Windows Local Session Manager (LSM) Denial of Service Vulnerability |
| CVE-2022-47599 | HIGH | 7.2 | 0.5% | Dec 20, 2023 | Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source ... |
| CVE-2022-47597 | HIGH | 7.5 | 0.6% | Dec 20, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Popup Maker Popup Maker – Popup for opt-ins,... |
| CVE-2022-43450 | MEDIUM | 6.5 | 0.7% | Dec 19, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through... |
| CVE-2022-45809 | LOW | 3.7 | 0.4% | Dec 19, 2023 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs... |
| CVE-2022-40312 | MEDIUM | 6.5 | 0.4% | Dec 18, 2023 | Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue ... |
| CVE-2022-41677 | MEDIUM | 5.3 | 0.5% | Dec 18, 2023 | An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker t... |
| CVE-2022-24351 | MEDIUM | 4.7 | 0.1% | Dec 16, 2023 | TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before versi... |
| CVE-2022-45365 | MEDIUM | 6.1 | 43.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Uroševi... |
| CVE-2022-43843 | HIGH | 7.5 | 0.4% | Dec 14, 2023 | IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attack... |
| CVE-2022-22942 | HIGH | 7.8 | 2.6% | Dec 13, 2023 | The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to f... |
| CVE-2022-27488 | HIGH | 8.8 | 0.5% | Dec 13, 2023 | A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 thr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now