2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45910 | MEDIUM | 5.3 | 1.5% | Dec 7, 2022 | Improper neutralization of special elements used in an LDAP query ('LDAP Injection') vulnerability in ActiveDirectory an... |
| CVE-2022-39044 | MEDIUM | 6.8 | 0.3% | Dec 7, 2022 | Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an admini... |
| CVE-2022-34840 | MEDIUM | 6.5 | 0.2% | Dec 7, 2022 | Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to al... |
| CVE-2022-45122 | MEDIUM | 6.1 | 0.5% | Dec 7, 2022 | Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Ty... |
| CVE-2022-45113 | MEDIUM | 6.5 | 0.6% | Dec 7, 2022 | Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to acces... |
| CVE-2022-43668 | MEDIUM | 6.1 | 0.4% | Dec 7, 2022 | Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript co... |
| CVE-2022-42486 | MEDIUM | 4.8 | 0.6% | Dec 7, 2022 | Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote a... |
| CVE-2022-41994 | MEDIUM | 4.8 | 0.6% | Dec 7, 2022 | Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote aut... |
| CVE-2022-41783 | MEDIUM | 5.5 | 0.2% | Dec 7, 2022 | tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (... |
| CVE-2022-37406 | MEDIUM | 4.8 | 0.6% | Dec 7, 2022 | Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authen... |
| CVE-2022-45008 | MEDIUM | 4.8 | 0.4% | Dec 7, 2022 | Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the c... |
| CVE-2022-44153 | MEDIUM | 6.1 | 0.4% | Dec 7, 2022 | Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-45918 | MEDIUM | 6.5 | 1.2% | Dec 7, 2022 | ILIAS before 7.16 allows External Control of File Name or Path. |
| CVE-2022-45917 | MEDIUM | 6.1 | 2.0% | Dec 7, 2022 | ILIAS before 7.16 has an Open Redirect. |
| CVE-2022-45916 | MEDIUM | 5.4 | 0.9% | Dec 7, 2022 | ILIAS before 7.16 allows XSS. |
| CVE-2022-42329 | MEDIUM | 5.5 | 0.2% | Dec 7, 2022 | Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text expl... |
| CVE-2022-42328 | MEDIUM | 5.5 | 0.2% | Dec 7, 2022 | Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text expl... |
| CVE-2022-3643 | MEDIUM | 6.5 | 0.5% | Dec 7, 2022 | Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface res... |
| CVE-2022-45833 | MEDIUM | 6.5 | 0.8% | Dec 6, 2022 | Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress. |
| CVE-2022-45816 | MEDIUM | 5.4 | 0.4% | Dec 6, 2022 | Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress. |
| CVE-2022-45848 | MEDIUM | 6.1 | 0.4% | Dec 6, 2022 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin <= 13.1.0.9 on WordPress. |
| CVE-2022-43369 | MEDIUM | 6.1 | 0.5% | Dec 6, 2022 | AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the compo... |
| CVE-2022-41560 | MEDIUM | 6.5 | 0.6% | Dec 6, 2022 | The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitab... |
| CVE-2022-23466 | MEDIUM | 5.4 | 0.4% | Dec 6, 2022 | teler is an real-time intrusion detection and threat alert dashboard. teler prior to version 2.0.0-rc.4 is vulnerable to... |
| CVE-2022-45326 | MEDIUM | 4.9 | 1.1% | Dec 6, 2022 | An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now