2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47186 | CRITICAL | 9.1 | 0.6% | Sep 28, 2023 | There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/... |
| CVE-2022-48606 | HIGH | 7.5 | 0.4% | Sep 27, 2023 | Stability-related vulnerability in the binder background management and control module. Successful exploitation of this ... |
| CVE-2022-4318 | HIGH | 7.8 | 0.3% | Sep 25, 2023 | A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a speci... |
| CVE-2022-4245 | MEDIUM | 4.3 | 0.7% | Sep 25, 2023 | A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comme... |
| CVE-2022-4244 | HIGH | 7.5 | 1.3% | Sep 25, 2023 | A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files ... |
| CVE-2022-4137 | MEDIUM | 6.1 | 1.1% | Sep 25, 2023 | A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte ha... |
| CVE-2022-48605 | CRITICAL | 9.8 | 0.4% | Sep 25, 2023 | Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect co... |
| CVE-2022-3962 | MEDIUM | 4.3 | 0.7% | Sep 23, 2023 | A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when... |
| CVE-2022-4039 | CRITICAL | 9.8 | 0.8% | Sep 22, 2023 | A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured manage... |
| CVE-2022-3874 | CRITICAL | 9.1 | 2.2% | Sep 22, 2023 | A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the forem... |
| CVE-2022-3596 | HIGH | 7.5 | 1.1% | Sep 20, 2023 | An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect s... |
| CVE-2022-3916 | MEDIUM | 6.8 | 1.0% | Sep 20, 2023 | A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especi... |
| CVE-2022-1438 | MEDIUM | 4.8 | 0.7% | Sep 20, 2023 | A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, r... |
| CVE-2022-45448 | MEDIUM | 6.1 | 0.3% | Sep 20, 2023 | M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document craftin... |
| CVE-2022-45447 | MEDIUM | 6.5 | 0.7% | Sep 20, 2023 | M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to a directory traversal vulnerabilit... |
| CVE-2022-47562 | HIGH | 7.5 | 0.6% | Sep 20, 2023 | Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service... |
| CVE-2022-47561 | MEDIUM | 5.5 | 0.2% | Sep 20, 2023 | The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into... |
| CVE-2022-47560 | MEDIUM | 6.5 | 0.3% | Sep 20, 2023 | The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to ... |
| CVE-2022-47559 | HIGH | 8.8 | 0.2% | Sep 19, 2023 | Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to e... |
| CVE-2022-47558 | CRITICAL | 9.8 | 0.5% | Sep 19, 2023 | Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploitation of t... |
| CVE-2022-47557 | MEDIUM | 6.1 | 0.1% | Sep 19, 2023 | Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located... |
| CVE-2022-47556 | MEDIUM | 6.5 | 0.5% | Sep 19, 2023 | Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web server to send ... |
| CVE-2022-47555 | HIGH | 8.8 | 1.0% | Sep 19, 2023 | Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute comman... |
| CVE-2022-47554 | HIGH | 7.5 | 0.5% | Sep 19, 2023 | Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical info... |
| CVE-2022-47553 | HIGH | 7.5 | 0.6% | Sep 19, 2023 | Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive i... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now