2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-37421 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | Silverstripe silverstripe/cms through 4.11.0 allows XSS. |
| CVE-2022-42095 | MEDIUM | 4.8 | 1.9% | Nov 23, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page con... |
| CVE-2022-38145 | MEDIUM | 5.4 | 0.6% | Nov 23, 2022 | Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payl... |
| CVE-2022-37430 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2). |
| CVE-2022-37429 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute ... |
| CVE-2022-35500 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality. |
| CVE-2022-38724 | MEDIUM | 5.4 | 0.7% | Nov 23, 2022 | Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin thr... |
| CVE-2022-37774 | MEDIUM | 5.3 | 0.5% | Nov 23, 2022 | There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (p... |
| CVE-2022-37773 | MEDIUM | 6.5 | 0.8% | Nov 23, 2022 | An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the fil... |
| CVE-2022-45536 | MEDIUM | 4.9 | 0.8% | Nov 22, 2022 | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php.... |
| CVE-2022-45535 | MEDIUM | 4.9 | 0.8% | Nov 22, 2022 | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. ... |
| CVE-2022-45529 | MEDIUM | 4.9 | 0.7% | Nov 22, 2022 | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the post_category_id parameter at \admin\incl... |
| CVE-2022-39397 | MEDIUM | 4.3 | 0.4% | Nov 22, 2022 | aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret wi... |
| CVE-2022-39199 | MEDIUM | 5.9 | 0.3% | Nov 22, 2022 | immudb is a database with built-in cryptographic proof and verification. immudb client SDKs use server's UUID to disting... |
| CVE-2022-40228 | MEDIUM | 5.4 | 0.3% | Nov 22, 2022 | IBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.... |
| CVE-2022-3500 | MEDIUM | 5.1 | 0.2% | Nov 22, 2022 | A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled ... |
| CVE-2022-39067 | MEDIUM | 6.5 | 0.6% | Nov 22, 2022 | There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interf... |
| CVE-2022-41952 | MEDIUM | 5.3 | 0.8% | Nov 22, 2022 | Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs... |
| CVE-2022-41445 | MEDIUM | 4.8 | 1.0% | Nov 22, 2022 | A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute... |
| CVE-2022-42097 | MEDIUM | 4.8 | 0.8% | Nov 22, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' . |
| CVE-2022-42094 | MEDIUM | 4.8 | 2.5% | Nov 22, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' c... |
| CVE-2022-38462 | MEDIUM | 6.1 | 0.5% | Nov 22, 2022 | Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build... |
| CVE-2022-2513 | MEDIUM | 5.5 | 0.1% | Nov 22, 2022 | A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage fun... |
| CVE-2022-40954 | MEDIUM | 5.5 | 1.4% | Nov 22, 2022 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airfl... |
| CVE-2022-45363 | MEDIUM | 5.4 | 0.4% | Nov 22, 2022 | Auth. (subscriber+) Stored Cross-Site Scripting (XSS) in Muffingroup Betheme theme <= 26.6.1 on WordPress. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now