2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36137 | MEDIUM | 4.8 | 0.5% | Nov 29, 2022 | ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader. |
| CVE-2022-36136 | MEDIUM | 4.8 | 0.5% | Nov 29, 2022 | ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment. |
| CVE-2022-32966 | MEDIUM | 6.5 | 0.3% | Nov 29, 2022 | RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent ... |
| CVE-2022-45307 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write... |
| CVE-2022-45306 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticate... |
| CVE-2022-45305 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group w... |
| CVE-2022-45304 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group wri... |
| CVE-2022-45301 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group wri... |
| CVE-2022-4129 | MEDIUM | 5.5 | 0.2% | Nov 28, 2022 | A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can ... |
| CVE-2022-4128 | MEDIUM | 5.5 | 0.2% | Nov 28, 2022 | A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow li... |
| CVE-2022-4127 | MEDIUM | 5.5 | 0.2% | Nov 28, 2022 | A NULL pointer dereference issue was discovered in the Linux kernel in io_files_update_with_index_alloc. A local user co... |
| CVE-2022-45224 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in Admin/ad... |
| CVE-2022-45223 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /Admin/a... |
| CVE-2022-45221 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in changepa... |
| CVE-2022-45214 | MEDIUM | 6.1 | 0.4% | Nov 28, 2022 | A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrar... |
| CVE-2022-38753 | MEDIUM | 6.3 | 0.5% | Nov 28, 2022 | This update resolves a multi-factor authentication bypass attack |
| CVE-2022-24189 | MEDIUM | 6.5 | 0.5% | Nov 28, 2022 | The user_token authorization header on the Ourphoto App version 1.4.1 /apiv1/* end-points is not implemented properly. R... |
| CVE-2022-46147 | MEDIUM | 6.1 | 0.8% | Nov 28, 2022 | Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target... |
| CVE-2022-44937 | MEDIUM | 6.5 | 0.3% | Nov 28, 2022 | Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrato... |
| CVE-2022-41965 | MEDIUM | 6.1 | 0.3% | Nov 28, 2022 | Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Open... |
| CVE-2022-4104 | MEDIUM | 5.5 | 0.3% | Nov 28, 2022 | A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compressio... |
| CVE-2022-4169 | MEDIUM | 5.3 | 0.7% | Nov 28, 2022 | The Theme and plugin translation for Polylang is vulnerable to authorization bypass in versions up to, and including, 3.... |
| CVE-2022-41732 | MEDIUM | 5.5 | 0.2% | Nov 28, 2022 | IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Forc... |
| CVE-2022-44284 | MEDIUM | 5.4 | 0.5% | Nov 28, 2022 | Dinstar FXO Analog VoIP Gateway DAG2000-16O is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-41944 | MEDIUM | 4.3 | 0.4% | Nov 28, 2022 | Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions pr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now