2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43773 | HIGH | 8.8 | 22.2% | Apr 3, 2023 | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed w... |
| CVE-2022-43769 | HIGH | 7.2 | 97.7% | Apr 3, 2023 | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain w... |
| CVE-2022-38072 | HIGH | 8.8 | 1.1% | Apr 3, 2023 | An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master ... |
| CVE-2022-36440 | HIGH | 7.5 | 1.6% | Apr 3, 2023 | A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can malic... |
| CVE-2022-38923 | CRITICAL | 9.8 | 1.1% | Apr 3, 2023 | BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User-Agent' fi... |
| CVE-2022-38922 | CRITICAL | 9.8 | 1.0% | Apr 3, 2023 | BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'us... |
| CVE-2022-27665 | MEDIUM | 6.1 | 33.1% | Apr 3, 2023 | Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead ... |
| CVE-2022-42452 | MEDIUM | 5.4 | 0.3% | Apr 2, 2023 | HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to ... |
| CVE-2022-42447 | HIGH | 8.8 | 0.4% | Apr 2, 2023 | HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote a... |
| CVE-2022-3487 | — | — | — | Apr 2, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-47192 | HIGH | 8.8 | 1.3% | Mar 31, 2023 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users... |
| CVE-2022-47191 | HIGH | 8.8 | 1.1% | Mar 31, 2023 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with mod... |
| CVE-2022-47190 | CRITICAL | 9.8 | 1.6% | Mar 31, 2023 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that... |
| CVE-2022-47189 | CRITICAL | 9.1 | 0.9% | Mar 31, 2023 | Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration,... |
| CVE-2022-47188 | HIGH | 7.5 | 0.9% | Mar 31, 2023 | There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the... |
| CVE-2022-46021 | HIGH | 7.5 | 0.6% | Mar 31, 2023 | X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage. |
| CVE-2022-4899 | HIGH | 7.5 | 1.6% | Mar 31, 2023 | A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line ... |
| CVE-2022-3192 | MEDIUM | 5.3 | 0.6% | Mar 31, 2023 | Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affe... |
| CVE-2022-4744 | HIGH | 7.8 | 0.5% | Mar 30, 2023 | A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the devic... |
| CVE-2022-47542 | HIGH | 8.8 | 0.6% | Mar 30, 2023 | Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privil... |
| CVE-2022-23522 | HIGH | 8.8 | 0.9% | Mar 30, 2023 | MindsDB is an open source machine learning platform. An unsafe extraction is being performed using `shutil.unpack_archiv... |
| CVE-2022-43473 | MEDIUM | 5.4 | 19.8% | Mar 30, 2023 | A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.... |
| CVE-2022-30351 | HIGH | 7.5 | 0.6% | Mar 30, 2023 | PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted inf... |
| CVE-2022-30350 | HIGH | 7.5 | 0.7% | Mar 30, 2023 | Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Onl... |
| CVE-2022-3787 | HIGH | 7.8 | 0.2% | Mar 29, 2023 | A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now