2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45674 | MEDIUM | 6.5 | 0.3% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot. |
| CVE-2022-45673 | MEDIUM | 6.5 | 0.3% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet. |
| CVE-2022-4271 | MEDIUM | 5.4 | 0.7% | Dec 2, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4. |
| CVE-2022-45483 | MEDIUM | 5.9 | 0.4% | Dec 2, 2022 | Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected device) to see all dat... |
| CVE-2022-45480 | MEDIUM | 5.9 | 0.4% | Dec 2, 2022 | PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the server and a connected devi... |
| CVE-2022-46159 | MEDIUM | 4.3 | 0.6% | Dec 2, 2022 | Discourse is an open-source discussion platform. In version 2.8.13 and prior on the `stable` branch and version 2.9.0.be... |
| CVE-2022-45215 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary ... |
| CVE-2022-44212 | MEDIUM | 5.9 | 0.6% | Dec 1, 2022 | In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel. |
| CVE-2022-41971 | MEDIUM | 6.5 | 0.8% | Dec 1, 2022 | Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, a... |
| CVE-2022-41970 | MEDIUM | 5.3 | 0.6% | Dec 1, 2022 | Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares ... |
| CVE-2022-41968 | MEDIUM | 5.3 | 0.8% | Dec 1, 2022 | Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths ar... |
| CVE-2022-23737 | MEDIUM | 6.5 | 0.7% | Dec 1, 2022 | An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improp... |
| CVE-2022-43901 | MEDIUM | 5.5 | 0.2% | Dec 1, 2022 | IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticate... |
| CVE-2022-43900 | MEDIUM | 6.5 | 0.2% | Dec 1, 2022 | IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A loca... |
| CVE-2022-41297 | MEDIUM | 6.5 | 0.2% | Dec 1, 2022 | IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou... |
| CVE-2022-3711 | MEDIUM | 4.3 | 0.7% | Dec 1, 2022 | A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in ... |
| CVE-2022-45050 | MEDIUM | 6.1 | 0.4% | Dec 1, 2022 | A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's br... |
| CVE-2022-4253 | MEDIUM | 5.4 | 0.4% | Dec 1, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnera... |
| CVE-2022-4252 | MEDIUM | 6.1 | 0.4% | Dec 1, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affec... |
| CVE-2022-4251 | MEDIUM | 5.4 | 0.4% | Dec 1, 2022 | A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some u... |
| CVE-2022-4250 | MEDIUM | 6.1 | 0.4% | Dec 1, 2022 | A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerabil... |
| CVE-2022-4249 | MEDIUM | 6.1 | 0.4% | Dec 1, 2022 | A vulnerability, which was classified as problematic, was found in Movie Ticket Booking System. Affected is an unknown f... |
| CVE-2022-40849 | MEDIUM | 5.4 | 0.4% | Dec 1, 2022 | ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vul... |
| CVE-2022-40204 | MEDIUM | 5.4 | 0.3% | Dec 1, 2022 | A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via t... |
| CVE-2022-4234 | MEDIUM | 6.1 | 0.4% | Nov 30, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been rated as problematic. This issue affe... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now