2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2864 | HIGH | 8.8 | 0.5% | Oct 28, 2022 | The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu... |
| CVE-2022-3697 | HIGH | 7.5 | 0.7% | Oct 28, 2022 | A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2... |
| CVE-2022-37426 | HIGH | 7.5 | 0.5% | Oct 28, 2022 | Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content... |
| CVE-2022-43276 | HIGH | 7.2 | 0.7% | Oct 28, 2022 | Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /p... |
| CVE-2022-43275 | HIGH | 7.2 | 0.9% | Oct 28, 2022 | Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_acti... |
| CVE-2022-3512 | HIGH | 8.8 | 0.4% | Oct 28, 2022 | Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" f... |
| CVE-2022-3337 | HIGH | 8.5 | 0.4% | Oct 28, 2022 | It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch... |
| CVE-2022-3322 | HIGH | 7.5 | 0.2% | Oct 28, 2022 | Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disab... |
| CVE-2022-3321 | HIGH | 8.2 | 0.4% | Oct 28, 2022 | It was possible to bypass Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect... |
| CVE-2022-3733 | HIGH | 8.8 | 0.5% | Oct 28, 2022 | A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. This... |
| CVE-2022-3616 | HIGH | 7.5 | 0.4% | Oct 28, 2022 | Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequen... |
| CVE-2022-3379 | HIGH | 7.8 | 0.2% | Oct 27, 2022 | Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a ... |
| CVE-2022-3378 | HIGH | 7.8 | 0.2% | Oct 27, 2022 | Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a... |
| CVE-2022-41773 | HIGH | 8.8 | 7.9% | Oct 27, 2022 | The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIA... |
| CVE-2022-41627 | HIGH | 7.6 | 0.1% | Oct 27, 2022 | The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal electrocardiogram (EKG) has no encr... |
| CVE-2022-41133 | HIGH | 8.8 | 26.6% | Oct 27, 2022 | The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_... |
| CVE-2022-40967 | HIGH | 8.8 | 7.7% | Oct 27, 2022 | The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoT... |
| CVE-2022-43340 | HIGH | 8.8 | 0.4% | Oct 27, 2022 | A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and... |
| CVE-2022-39978 | HIGH | 7.2 | 1.1% | Oct 27, 2022 | Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in... |
| CVE-2022-39977 | HIGH | 7.2 | 1.1% | Oct 27, 2022 | Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in... |
| CVE-2022-0074 | HIGH | 8.8 | 1.2% | Oct 27, 2022 | Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Containe... |
| CVE-2022-0073 | HIGH | 8.8 | 8.7% | Oct 27, 2022 | Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dash... |
| CVE-2022-43366 | HIGH | 7.5 | 0.8% | Oct 27, 2022 | IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, at... |
| CVE-2022-43365 | HIGH | 7.5 | 0.8% | Oct 27, 2022 | IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function. This vulnerabi... |
| CVE-2022-43364 | HIGH | 7.5 | 0.7% | Oct 27, 2022 | An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now