2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40084 | MEDIUM | 5.3 | 0.6% | Oct 20, 2022 | OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages re... |
| CVE-2022-42200 | MEDIUM | 5.4 | 0.5% | Oct 20, 2022 | Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting (XSS) via the Exam List. |
| CVE-2022-42197 | MEDIUM | 6.5 | 0.6% | Oct 20, 2022 | In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privil... |
| CVE-2022-26954 | MEDIUM | 6.1 | 0.7% | Oct 20, 2022 | Multiple open redirect vulnerabilities in NopCommerce 4.10 through 4.50.1 allow remote attackers to conduct phishing att... |
| CVE-2022-41358 | MEDIUM | 5.4 | 2.9% | Oct 20, 2022 | A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary... |
| CVE-2022-41813 | MEDIUM | 6.5 | 0.6% | Oct 19, 2022 | In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when BIG-I... |
| CVE-2022-41780 | MEDIUM | 5.5 | 0.5% | Oct 19, 2022 | In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an... |
| CVE-2022-41770 | MEDIUM | 6.5 | 0.6% | Oct 19, 2022 | In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all... |
| CVE-2022-41694 | MEDIUM | 4.9 | 0.6% | Oct 19, 2022 | In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and B... |
| CVE-2022-38107 | MEDIUM | 5.3 | 0.6% | Oct 19, 2022 | Sensitive information could be displayed when a detailed technical error message is posted. This information could discl... |
| CVE-2022-31684 | MEDIUM | 4.3 | 0.6% | Oct 19, 2022 | Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. ... |
| CVE-2022-41708 | MEDIUM | 4.3 | 0.5% | Oct 19, 2022 | Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the worksp... |
| CVE-2022-43023 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerr... |
| CVE-2022-43022 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag deletion func... |
| CVE-2022-43021 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable. |
| CVE-2022-43020 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag update functi... |
| CVE-2022-43018 | MEDIUM | 6.1 | 1.3% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email parameter i... |
| CVE-2022-43017 | MEDIUM | 6.1 | 1.3% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFile compone... |
| CVE-2022-43016 | MEDIUM | 6.1 | 1.3% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback componen... |
| CVE-2022-43015 | MEDIUM | 6.1 | 1.3% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage pa... |
| CVE-2022-43014 | MEDIUM | 6.1 | 1.3% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parame... |
| CVE-2022-40885 | MEDIUM | 5.5 | 0.2% | Oct 19, 2022 | Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service. |
| CVE-2022-40884 | MEDIUM | 5.5 | 0.3% | Oct 19, 2022 | Bento4 1.6.0 has memory leaks via the mp4fragment. |
| CVE-2022-3586 | MEDIUM | 5.5 | 0.5% | Oct 19, 2022 | A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue functi... |
| CVE-2022-2805 | MEDIUM | 6.5 | 0.4% | Oct 19, 2022 | A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-sty... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now