2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45030 | HIGH | 8.8 | 2.7% | Apr 15, 2023 | A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may... |
| CVE-2022-43699 | MEDIUM | 4.3 | 0.5% | Apr 15, 2023 | OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be a... |
| CVE-2022-43698 | MEDIUM | 4.3 | 0.5% | Apr 15, 2023 | OX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list. |
| CVE-2022-43697 | MEDIUM | 6.1 | 0.4% | Apr 15, 2023 | OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob. |
| CVE-2022-43696 | MEDIUM | 6.1 | 0.4% | Apr 15, 2023 | OX App Suite before 7.10.6-rev20 allows XSS via upsell ads. |
| CVE-2022-48178 | MEDIUM | 5.4 | 1.8% | Apr 15, 2023 | X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via ... |
| CVE-2022-48177 | MEDIUM | 5.4 | 1.8% | Apr 15, 2023 | X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability v... |
| CVE-2022-46886 | MEDIUM | 6.1 | 0.3% | Apr 14, 2023 | There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redi... |
| CVE-2022-47501 | HIGH | 7.5 | 10.2% | Apr 14, 2023 | Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a p... |
| CVE-2022-4893 | — | — | — | Apr 14, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-3748 | CRITICAL | 9.8 | 0.9% | Apr 14, 2023 | Improper Authorization vulnerability in ForgeRock Inc. Access Management allows Authentication Bypass. This issue affect... |
| CVE-2022-45180 | MEDIUM | 6.5 | 0.7% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdes... |
| CVE-2022-45178 | HIGH | 8.8 | 1.0% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdes... |
| CVE-2022-45175 | MEDIUM | 6.5 | 0.7% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under... |
| CVE-2022-45174 | CRITICAL | 9.8 | 1.0% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication for SAML User... |
| CVE-2022-45173 | CRITICAL | 9.8 | 1.0% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur und... |
| CVE-2022-45170 | MEDIUM | 6.5 | 0.4% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/v... |
| CVE-2022-47027 | CRITICAL | 9.8 | 1.5% | Apr 14, 2023 | Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal sto... |
| CVE-2022-48468 | MEDIUM | 5.5 | 0.4% | Apr 13, 2023 | protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member. |
| CVE-2022-2445 | — | — | — | Apr 13, 2023 | Rejected reason: Incorrectly assigned CVE. Not a valid issue. |
| CVE-2022-45358 | MEDIUM | 5.4 | 0.4% | Apr 13, 2023 | Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions. |
| CVE-2022-44625 | MEDIUM | 4.8 | 0.4% | Apr 13, 2023 | Auth. (admin+) Stored Cross-Site Scripting') vulnerability in Zephilou Cyklodev WP Notify plugin <= 1.2.1 versions. |
| CVE-2022-45064 | CRITICAL | 9 | 1.1% | Apr 13, 2023 | The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-... |
| CVE-2022-40532 | HIGH | 7.8 | 0.1% | Apr 13, 2023 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
| CVE-2022-40503 | HIGH | 7.5 | 0.4% | Apr 13, 2023 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now