2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39346 | MEDIUM | 6.5 | 1.0% | Nov 25, 2022 | Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit u... |
| CVE-2022-39339 | MEDIUM | 4.3 | 0.4% | Nov 25, 2022 | user_oidc is an OpenID Connect user backend for Nextcloud. In versions prior to 1.2.1 sensitive information such as the ... |
| CVE-2022-39338 | MEDIUM | 5.4 | 0.6% | Nov 25, 2022 | user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery u... |
| CVE-2022-39334 | MEDIUM | 4.7 | 0.2% | Nov 25, 2022 | Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless serv... |
| CVE-2022-39331 | MEDIUM | 5.4 | 0.9% | Nov 25, 2022 | Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language in... |
| CVE-2022-45475 | MEDIUM | 6.5 | 0.8% | Nov 25, 2022 | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. Th... |
| CVE-2022-41712 | MEDIUM | 6.5 | 0.9% | Nov 25, 2022 | Frappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because th... |
| CVE-2022-0698 | MEDIUM | 6.1 | 0.7% | Nov 25, 2022 | Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' p... |
| CVE-2022-45218 | MEDIUM | 6.1 | 0.4% | Nov 25, 2022 | Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability. This vulne... |
| CVE-2022-45210 | MEDIUM | 4.3 | 0.5% | Nov 25, 2022 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin. |
| CVE-2022-45208 | MEDIUM | 4.3 | 0.5% | Nov 25, 2022 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin. |
| CVE-2022-45205 | MEDIUM | 5.3 | 0.6% | Nov 25, 2022 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. |
| CVE-2022-45040 | MEDIUM | 5.4 | 0.4% | Nov 25, 2022 | A cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4 allows attackers to exec... |
| CVE-2022-45038 | MEDIUM | 5.4 | 1.0% | Nov 25, 2022 | A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute ar... |
| CVE-2022-45037 | MEDIUM | 5.4 | 1.0% | Nov 25, 2022 | A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbi... |
| CVE-2022-45036 | MEDIUM | 5.4 | 0.5% | Nov 25, 2022 | A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute ... |
| CVE-2022-4091 | MEDIUM | 6.1 | 0.4% | Nov 25, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affec... |
| CVE-2022-45888 | MEDIUM | 6.4 | 0.7% | Nov 25, 2022 | An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use... |
| CVE-2022-45887 | MEDIUM | 4.7 | 0.3% | Nov 25, 2022 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak bec... |
| CVE-2022-29833 | MEDIUM | 6.5 | 1.0% | Nov 25, 2022 | Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and late... |
| CVE-2022-29832 | MEDIUM | 6.5 | 0.6% | Nov 25, 2022 | Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions... |
| CVE-2022-4089 | MEDIUM | 5.4 | 0.4% | Nov 24, 2022 | A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability aff... |
| CVE-2022-40976 | MEDIUM | 5.5 | 0.2% | Nov 24, 2022 | A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a z... |
| CVE-2022-40266 | MEDIUM | 6.5 | 0.8% | Nov 24, 2022 | Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 a... |
| CVE-2022-45873 | MEDIUM | 5.5 | 0.3% | Nov 23, 2022 | systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long back... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now