2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3689 | HIGH | 7.2 | 1.8% | Nov 28, 2022 | The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL sta... |
| CVE-2022-3490 | HIGH | 7.2 | 1.1% | Nov 28, 2022 | The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provi... |
| CVE-2022-4020 | HIGH | 8.2 | 0.2% | Nov 28, 2022 | Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated pr... |
| CVE-2022-38900 | HIGH | 7.5 | 24.9% | Nov 28, 2022 | decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. |
| CVE-2022-45939 | HIGH | 7.8 | 0.6% | Nov 28, 2022 | GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, ... |
| CVE-2022-45934 | HIGH | 7.8 | 0.8% | Nov 27, 2022 | An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an intege... |
| CVE-2022-45932 | HIGH | 7.5 | 0.6% | Nov 27, 2022 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/... |
| CVE-2022-45931 | HIGH | 7.5 | 0.5% | Nov 27, 2022 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/... |
| CVE-2022-45930 | HIGH | 7.5 | 0.7% | Nov 27, 2022 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/... |
| CVE-2022-45919 | HIGH | 7 | 0.3% | Nov 27, 2022 | An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free... |
| CVE-2022-24999 | HIGH | 7.5 | 14.7% | Nov 26, 2022 | qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for... |
| CVE-2022-41156 | HIGH | 7.8 | 0.2% | Nov 25, 2022 | Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attack... |
| CVE-2022-44860 | HIGH | 7.2 | 0.7% | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-44859 | HIGH | 7.2 | 0.7% | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-44858 | HIGH | 7.2 | 0.8% | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-41958 | HIGH | 7.8 | 0.4% | Nov 25, 2022 | super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config whic... |
| CVE-2022-41706 | HIGH | 8.2 | 0.6% | Nov 25, 2022 | Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus... |
| CVE-2022-43984 | HIGH | 8.2 | 0.6% | Nov 25, 2022 | Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus... |
| CVE-2022-43983 | HIGH | 8.2 | 0.6% | Nov 25, 2022 | Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus... |
| CVE-2022-38813 | HIGH | 8.1 | 1.5% | Nov 25, 2022 | PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows atta... |
| CVE-2022-23044 | HIGH | 8.8 | 0.4% | Nov 25, 2022 | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended action... |
| CVE-2022-45039 | HIGH | 7.2 | 1.0% | Nov 25, 2022 | An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbi... |
| CVE-2022-44411 | HIGH | 7.5 | 0.4% | Nov 25, 2022 | Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers t... |
| CVE-2022-38767 | HIGH | 7.5 | 1.0% | Nov 25, 2022 | An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius serv... |
| CVE-2022-38166 | HIGH | 7.5 | 0.7% | Nov 25, 2022 | In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dl... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now