2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2791 | HIGH | 7.8 | 0.2% | Nov 22, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File w... |
| CVE-2022-41943 | HIGH | 7.2 | 0.9% | Nov 22, 2022 | sourcegraph is a code intelligence platform. As a site admin it was possible to execute arbitrary commands on Gitserver ... |
| CVE-2022-41942 | HIGH | 7.8 | 1.5% | Nov 22, 2022 | Sourcegraph is a code intelligence platform. In versions prior to 4.1.0 a command Injection vulnerability existed in the... |
| CVE-2022-41950 | HIGH | 7.8 | 0.4% | Nov 22, 2022 | super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerabilit... |
| CVE-2022-39066 | HIGH | 8.8 | 26.5% | Nov 22, 2022 | There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phon... |
| CVE-2022-44737 | HIGH | 8.8 | 0.3% | Nov 22, 2022 | Multiple Cross-Site Request Forgery vulnerabilities in All-In-One Security (AIOS) – Security and Firewall (WordPress plu... |
| CVE-2022-33012 | HIGH | 8.8 | 1.3% | Nov 22, 2022 | Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack. |
| CVE-2022-42098 | HIGH | 8.8 | 1.2% | Nov 22, 2022 | KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php. |
| CVE-2022-3910 | HIGH | 7.8 | 1.0% | Nov 22, 2022 | Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_ur... |
| CVE-2022-0222 | HIGH | 7.5 | 0.6% | Nov 22, 2022 | A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet commu... |
| CVE-2022-37301 | HIGH | 7.5 | 0.7% | Nov 22, 2022 | A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the contr... |
| CVE-2022-41131 | HIGH | 7.8 | 1.8% | Nov 22, 2022 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airfl... |
| CVE-2022-37931 | HIGH | 7.8 | 0.2% | Nov 22, 2022 | A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround... |
| CVE-2022-35407 | HIGH | 7.8 | 0.2% | Nov 22, 2022 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code... |
| CVE-2022-43685 | HIGH | 8.8 | 0.7% | Nov 22, 2022 | CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request.... |
| CVE-2022-41937 | HIGH | 8.1 | 0.7% | Nov 22, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The application... |
| CVE-2022-41936 | HIGH | 7.5 | 0.7% | Nov 22, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The `modificati... |
| CVE-2022-30529 | HIGH | 7.2 | 1.0% | Nov 22, 2022 | File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers... |
| CVE-2022-44786 | HIGH | 7.5 | 0.7% | Nov 21, 2022 | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any pag... |
| CVE-2022-44784 | HIGH | 8.8 | 1.0% | Nov 21, 2022 | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of service... |
| CVE-2022-3388 | HIGH | 7.8 | 0.3% | Nov 21, 2022 | An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An auth... |
| CVE-2022-44830 | HIGH | 7.8 | 0.6% | Nov 21, 2022 | Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the Firs... |
| CVE-2022-45422 | HIGH | 7.8 | 0.2% | Nov 21, 2022 | When LG SmartShare is installed, local privilege escalation is possible through DLL Hijacking attack. The LG ID is LVE-H... |
| CVE-2022-45470 | HIGH | 7.5 | 1.2% | Nov 21, 2022 | missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Ha... |
| CVE-2022-44163 | HIGH | 7.5 | 0.8% | Nov 21, 2022 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now