2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4640 | MEDIUM | 5.4 | 0.4% | Dec 21, 2022 | A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is t... |
| CVE-2022-4638 | MEDIUM | 6.1 | 0.4% | Dec 21, 2022 | A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects ... |
| CVE-2022-4637 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipu... |
| CVE-2022-23551 | MEDIUM | 5.3 | 0.7% | Dec 21, 2022 | aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of ... |
| CVE-2022-4632 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnera... |
| CVE-2022-4631 | MEDIUM | 6.1 | 0.4% | Dec 21, 2022 | A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file b... |
| CVE-2022-46096 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows... |
| CVE-2022-46095 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulne... |
| CVE-2022-36221 | MEDIUM | 6.5 | 0.8% | Dec 21, 2022 | Nokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to rea... |
| CVE-2022-4630 | MEDIUM | 5.3 | 0.6% | Dec 21, 2022 | Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master. |
| CVE-2022-40841 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrar... |
| CVE-2022-44756 | MEDIUM | 6.5 | 0.4% | Dec 21, 2022 | Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information d... |
| CVE-2022-42454 | MEDIUM | 5.3 | 0.2% | Dec 21, 2022 | Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information dis... |
| CVE-2022-38655 | MEDIUM | 5.8 | 0.4% | Dec 21, 2022 | BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixl... |
| CVE-2022-46662 | MEDIUM | 6.7 | 0.4% | Dec 21, 2022 | Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains sp... |
| CVE-2022-44449 | MEDIUM | 4.8 | 0.7% | Dec 21, 2022 | Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacke... |
| CVE-2022-43543 | MEDIUM | 5.4 | 0.5% | Dec 21, 2022 | KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handlin... |
| CVE-2022-25929 | MEDIUM | 5.4 | 0.8% | Dec 21, 2022 | The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting (XSS) due to improper user inp... |
| CVE-2022-4617 | MEDIUM | 6.1 | 0.6% | Dec 21, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2. |
| CVE-2022-46318 | MEDIUM | 5.3 | 0.3% | Dec 20, 2022 | The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account remo... |
| CVE-2022-46313 | MEDIUM | 5.3 | 0.4% | Dec 20, 2022 | The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause u... |
| CVE-2022-43382 | MEDIUM | 4.4 | 0.2% | Dec 20, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the l... |
| CVE-2022-41590 | MEDIUM | 5.5 | 0.1% | Dec 20, 2022 | Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypas... |
| CVE-2022-39166 | MEDIUM | 4.9 | 0.6% | Dec 20, 2022 | IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IB... |
| CVE-2022-46771 | MEDIUM | 4.6 | 0.4% | Dec 20, 2022 | IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.18, 7.0.5.0 through 7.0.5.13, 7.1.0.0 through 7.1.2.9, 7.2.0.0 through... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now