2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23532 | MEDIUM | 6.5 | 0.7% | Jan 14, 2023 | APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j that provides hundreds of procedures and functions. A... |
| CVE-2022-48091 | MEDIUM | 5.4 | 0.4% | Jan 13, 2023 | Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting (XSS) via process_update_profile.php. |
| CVE-2022-48090 | MEDIUM | 6.5 | 0.7% | Jan 13, 2023 | Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php. |
| CVE-2022-42288 | MEDIUM | 5.3 | 0.5% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a v... |
| CVE-2022-42284 | MEDIUM | 5.5 | 0.1% | Jan 13, 2023 | NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credenti... |
| CVE-2022-42282 | MEDIUM | 5.5 | 0.5% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may ... |
| CVE-2022-42281 | MEDIUM | 6.7 | 0.2% | Jan 13, 2023 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker ... |
| CVE-2022-48258 | MEDIUM | 5.3 | 1.1% | Jan 13, 2023 | In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles. |
| CVE-2022-48257 | MEDIUM | 5.3 | 0.9% | Jan 13, 2023 | In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. |
| CVE-2022-46438 | MEDIUM | 5.4 | 0.4% | Jan 13, 2023 | A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows a... |
| CVE-2022-42704 | MEDIUM | 5.4 | 0.4% | Jan 13, 2023 | A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec... |
| CVE-2022-47102 | MEDIUM | 5.4 | 0.5% | Jan 12, 2023 | A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute a... |
| CVE-2022-46622 | MEDIUM | 6.1 | 0.5% | Jan 12, 2023 | A cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web s... |
| CVE-2022-45729 | MEDIUM | 6.1 | 0.5% | Jan 12, 2023 | A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute ar... |
| CVE-2022-45728 | MEDIUM | 6.1 | 0.5% | Jan 12, 2023 | Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability. |
| CVE-2022-4842 | MEDIUM | 5.5 | 0.2% | Jan 12, 2023 | A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user coul... |
| CVE-2022-3628 | MEDIUM | 6.6 | 0.5% | Jan 12, 2023 | A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user conne... |
| CVE-2022-3145 | MEDIUM | 4.7 | 0.4% | Jan 12, 2023 | An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a ... |
| CVE-2022-46371 | MEDIUM | 5.3 | 0.4% | Jan 12, 2023 | Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default admi... |
| CVE-2022-46369 | MEDIUM | 5.4 | 0.4% | Jan 12, 2023 | Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts i... |
| CVE-2022-39187 | MEDIUM | 6.1 | 0.4% | Jan 12, 2023 | Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vector... |
| CVE-2022-39186 | MEDIUM | 5.5 | 0.2% | Jan 12, 2023 | EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions |
| CVE-2022-39183 | MEDIUM | 6.1 | 0.4% | Jan 12, 2023 | Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors. |
| CVE-2022-46503 | MEDIUM | 5.4 | 0.4% | Jan 12, 2023 | A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0... |
| CVE-2022-3592 | MEDIUM | 6.5 | 2.4% | Jan 12, 2023 | A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' esca... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now