2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45280 | MEDIUM | 5.4 | 0.3% | Nov 23, 2022 | A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to exec... |
| CVE-2022-41933 | MEDIUM | 6.5 | 0.4% | Nov 23, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When the `reset... |
| CVE-2022-41932 | MEDIUM | 5.3 | 0.5% | Nov 23, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible t... |
| CVE-2022-45866 | MEDIUM | 5.3 | 1.3% | Nov 23, 2022 | qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allow... |
| CVE-2022-41946 | MEDIUM | 5.5 | 0.5% | Nov 23, 2022 | pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStateme... |
| CVE-2022-41935 | MEDIUM | 4.3 | 0.8% | Nov 23, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without t... |
| CVE-2022-41929 | MEDIUM | 4.9 | 0.7% | Nov 23, 2022 | org.xwiki.platform:xwiki-platform-oldcore is missing authorization in User#setDisabledStatus, which may allow an incorre... |
| CVE-2022-40772 | MEDIUM | 6.5 | 3.0% | Nov 23, 2022 | Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to a... |
| CVE-2022-40771 | MEDIUM | 4.9 | 3.5% | Nov 23, 2022 | Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads t... |
| CVE-2022-36111 | MEDIUM | 5.3 | 0.4% | Nov 23, 2022 | immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb ... |
| CVE-2022-38115 | MEDIUM | 5.3 | 0.7% | Nov 23, 2022 | Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT |
| CVE-2022-38114 | MEDIUM | 6.1 | 0.5% | Nov 23, 2022 | This vulnerability occurs when a web server fails to correctly process the Content-Length of POST requests. This can lea... |
| CVE-2022-38113 | MEDIUM | 5.3 | 0.7% | Nov 23, 2022 | This vulnerability discloses build and services versions in the server response header. |
| CVE-2022-35501 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the du... |
| CVE-2022-44280 | MEDIUM | 6.5 | 0.8% | Nov 23, 2022 | Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img. |
| CVE-2022-45151 | MEDIUM | 5.4 | 0.7% | Nov 23, 2022 | The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied dat... |
| CVE-2022-45150 | MEDIUM | 6.1 | 0.7% | Nov 23, 2022 | A reflected cross-site scripting vulnerability was discovered in Moodle. This flaw exists due to insufficient sanitizati... |
| CVE-2022-45149 | MEDIUM | 5.4 | 0.4% | Nov 23, 2022 | A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course red... |
| CVE-2022-42895 | MEDIUM | 6.5 | 0.4% | Nov 23, 2022 | There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function whic... |
| CVE-2022-4045 | MEDIUM | 6.5 | 0.6% | Nov 23, 2022 | A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple reques... |
| CVE-2022-4044 | MEDIUM | 6.5 | 1.1% | Nov 23, 2022 | A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large auto... |
| CVE-2022-4019 | MEDIUM | 6.5 | 0.7% | Nov 23, 2022 | A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server vi... |
| CVE-2022-45472 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onpo... |
| CVE-2022-41446 | MEDIUM | 5.4 | 1.1% | Nov 23, 2022 | An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to a... |
| CVE-2022-38147 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3). |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now