2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25917 | MEDIUM | 4.4 | 0.2% | Nov 11, 2022 | Uncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version R01.01.0005 may allow a p... |
| CVE-2022-21794 | MEDIUM | 6.7 | 0.2% | Nov 11, 2022 | Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, I... |
| CVE-2022-21198 | MEDIUM | 6.4 | 0.1% | Nov 11, 2022 | Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user t... |
| CVE-2022-3950 | MEDIUM | 6.1 | 0.4% | Nov 11, 2022 | A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink ... |
| CVE-2022-41854 | MEDIUM | 6.5 | 1.5% | Nov 11, 2022 | Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser ... |
| CVE-2022-3949 | MEDIUM | 6.1 | 0.5% | Nov 11, 2022 | A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This is... |
| CVE-2022-3945 | MEDIUM | 5.3 | 0.9% | Nov 11, 2022 | Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3. |
| CVE-2022-3943 | MEDIUM | 5.4 | 0.3% | Nov 11, 2022 | A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the fil... |
| CVE-2022-3942 | MEDIUM | 6.1 | 0.7% | Nov 11, 2022 | A vulnerability was found in SourceCodester Sanitization Management System and classified as problematic. This issue aff... |
| CVE-2022-3941 | MEDIUM | 5.3 | 0.7% | Nov 11, 2022 | A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown cod... |
| CVE-2022-41873 | MEDIUM | 5.4 | 0.2% | Nov 11, 2022 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are... |
| CVE-2022-42460 | MEDIUM | 5.4 | 0.4% | Nov 10, 2022 | Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on W... |
| CVE-2022-43679 | MEDIUM | 5.3 | 0.3% | Nov 10, 2022 | The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config us... |
| CVE-2022-41876 | MEDIUM | 5.3 | 1.3% | Nov 10, 2022 | ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and ... |
| CVE-2022-41874 | MEDIUM | 4.7 | 0.4% | Nov 10, 2022 | Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri ... |
| CVE-2022-35740 | MEDIUM | 6.1 | 1.2% | Nov 10, 2022 | dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using ... |
| CVE-2022-26088 | MEDIUM | 5.4 | 1.0% | Nov 10, 2022 | An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to ... |
| CVE-2022-36022 | MEDIUM | 5.3 | 0.4% | Nov 10, 2022 | Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearn... |
| CVE-2022-34666 | MEDIUM | 5.5 | 0.2% | Nov 10, 2022 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user wi... |
| CVE-2022-43754 | MEDIUM | 5.4 | 0.4% | Nov 10, 2022 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni... |
| CVE-2022-43753 | MEDIUM | 4.3 | 0.7% | Nov 10, 2022 | A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUS... |
| CVE-2022-38121 | MEDIUM | 6.5 | 3.4% | Nov 10, 2022 | UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with gene... |
| CVE-2022-38120 | MEDIUM | 6.5 | 5.6% | Nov 10, 2022 | UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerab... |
| CVE-2022-31255 | MEDIUM | 4.3 | 0.7% | Nov 10, 2022 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SU... |
| CVE-2022-42786 | MEDIUM | 5.4 | 0.4% | Nov 10, 2022 | Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now