2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3862 | MEDIUM | 4.8 | 0.5% | Dec 12, 2022 | The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which... |
| CVE-2022-3853 | MEDIUM | 5.4 | 0.2% | Dec 12, 2022 | Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a w... |
| CVE-2022-3609 | MEDIUM | 4.8 | 0.4% | Dec 12, 2022 | The GetYourGuide Ticketing WordPress plugin before 1.0.4 does not sanitise and escape some parameters, which could allow... |
| CVE-2022-45956 | MEDIUM | 5.3 | 0.8% | Dec 12, 2022 | Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method... |
| CVE-2022-4421 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | A vulnerability was found in rAthena FluxCP. It has been classified as problematic. Affected is an unknown function of t... |
| CVE-2022-45970 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board. |
| CVE-2022-44648 | MEDIUM | 5.5 | 0.7% | Dec 12, 2022 | An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to di... |
| CVE-2022-44647 | MEDIUM | 5.5 | 0.7% | Dec 12, 2022 | An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to di... |
| CVE-2022-44532 | MEDIUM | 6.5 | 0.7% | Dec 12, 2022 | An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise command line interface. Success... |
| CVE-2022-43518 | MEDIUM | 6.5 | 0.7% | Dec 12, 2022 | An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful explo... |
| CVE-2022-42446 | MEDIUM | 6.5 | 0.4% | Dec 12, 2022 | Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ab... |
| CVE-2022-42445 | MEDIUM | 4.9 | 0.5% | Dec 12, 2022 | HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to re... |
| CVE-2022-37930 | MEDIUM | 5.5 | 0.2% | Dec 12, 2022 | A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary ... |
| CVE-2022-37929 | MEDIUM | 5.5 | 0.1% | Dec 12, 2022 | Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble ... |
| CVE-2022-37928 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Fla... |
| CVE-2022-37927 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashb... |
| CVE-2022-37926 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to con... |
| CVE-2022-37925 | MEDIUM | 6.1 | 0.5% | Dec 12, 2022 | A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker ... |
| CVE-2022-37911 | MEDIUM | 5.5 | 0.6% | Dec 12, 2022 | Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A ... |
| CVE-2022-37910 | MEDIUM | 6.5 | 0.6% | Dec 12, 2022 | A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerabil... |
| CVE-2022-37909 | MEDIUM | 5.3 | 0.3% | Dec 12, 2022 | Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the config... |
| CVE-2022-37908 | MEDIUM | 6.5 | 0.2% | Dec 12, 2022 | An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful expl... |
| CVE-2022-34318 | MEDIUM | 6.1 | 0.6% | Dec 12, 2022 | IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to v... |
| CVE-2022-32537 | MEDIUM | 4.8 | 0.3% | Dec 12, 2022 | A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pai... |
| CVE-2022-23511 | MEDIUM | 6.8 | 0.5% | Dec 12, 2022 | A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now