2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-28495 | CRITICAL | 9.8 | 2.4% | Mar 24, 2023 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebW... |
| CVE-2022-3146 | MEDIUM | 5.5 | 0.2% | Mar 23, 2023 | A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are n... |
| CVE-2022-3101 | MEDIUM | 5.5 | 0.2% | Mar 23, 2023 | A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are n... |
| CVE-2022-36413 | CRITICAL | 9.1 | 3.1% | Mar 23, 2023 | Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset o... |
| CVE-2022-47145 | MEDIUM | 6.1 | 0.5% | Mar 23, 2023 | Reflected Cross-Site Scripting (XSS) vulnerability in Blockonomics WordPress Bitcoin Payments – Blockonomics plugin <= 3... |
| CVE-2022-28496 | CRITICAL | 9.8 | 1.4% | Mar 23, 2023 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswor... |
| CVE-2022-47173 | MEDIUM | 4.8 | 0.4% | Mar 23, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nasirahmed Connect Contact Form 7, WooCommerce To Goog... |
| CVE-2022-28497 | CRITICAL | 9.8 | 1.4% | Mar 23, 2023 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_wri... |
| CVE-2022-47589 | MEDIUM | 4.8 | 0.4% | Mar 23, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso para WooCommerce plugin <... |
| CVE-2022-28493 | CRITICAL | 9.8 | 0.7% | Mar 23, 2023 | A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service, |
| CVE-2022-28491 | CRITICAL | 9.8 | 4.7% | Mar 23, 2023 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost functio... |
| CVE-2022-28492 | CRITICAL | 9.8 | 1.3% | Mar 23, 2023 | TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login. |
| CVE-2022-4224 | HIGH | 8.8 | 0.9% | Mar 23, 2023 | In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to... |
| CVE-2022-47431 | MEDIUM | 6.1 | 0.4% | Mar 23, 2023 | Reflected Cross-Site Scripting (XSS) vulnerability in Tussendoor internet & marketing Open RDW kenteken voertuiginformat... |
| CVE-2022-45843 | MEDIUM | 5.4 | 0.4% | Mar 23, 2023 | Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin <= 3.5.1.9 versions. |
| CVE-2022-44742 | MEDIUM | 4.8 | 0.4% | Mar 23, 2023 | Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions. |
| CVE-2022-22512 | CRITICAL | 9.8 | 0.7% | Mar 23, 2023 | Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker... |
| CVE-2022-30037 | HIGH | 7.2 | 0.9% | Mar 23, 2023 | XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrar... |
| CVE-2022-28494 | CRITICAL | 9.8 | 2.6% | Mar 23, 2023 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgr... |
| CVE-2022-43863 | HIGH | 7.2 | 0.7% | Mar 22, 2023 | IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain ... |
| CVE-2022-45004 | MEDIUM | 6.1 | 0.6% | Mar 22, 2023 | Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page. |
| CVE-2022-45003 | HIGH | 7.5 | 1.0% | Mar 22, 2023 | Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus. |
| CVE-2022-3938 | — | — | — | Mar 22, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-4095 | HIGH | 7.8 | 0.3% | Mar 22, 2023 | A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rt... |
| CVE-2022-46750 | — | — | — | Mar 22, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now