2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1607 | HIGH | 8.8 | 0.2% | Feb 24, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plan... |
| CVE-2022-46440 | MEDIUM | 5.5 | 0.3% | Feb 24, 2023 | ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c. |
| CVE-2022-46785 | MEDIUM | 6.1 | 0.4% | Feb 23, 2023 | SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2). |
| CVE-2022-46784 | MEDIUM | 6.1 | 0.4% | Feb 23, 2023 | SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.... |
| CVE-2022-36231 | CRITICAL | 9.8 | 3.0% | Feb 23, 2023 | pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3. |
| CVE-2022-4492 | HIGH | 7.5 | 0.6% | Feb 23, 2023 | The undertow client is not checking the server identity presented by the server certificate in https connections. This i... |
| CVE-2022-46786 | MEDIUM | 5.4 | 0.4% | Feb 23, 2023 | SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2). |
| CVE-2022-3219 | LOW | 3.3 | 0.3% | Feb 23, 2023 | GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signature... |
| CVE-2022-2176 | — | — | — | Feb 23, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2022-48344 | MEDIUM | 6.1 | 0.4% | Feb 23, 2023 | In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process. |
| CVE-2022-48343 | MEDIUM | 6.1 | 59.5% | Feb 23, 2023 | In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process. |
| CVE-2022-48342 | CRITICAL | 9.8 | 0.3% | Feb 23, 2023 | In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents. |
| CVE-2022-2504 | CRITICAL | 9.8 | 0.6% | Feb 23, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SDD Computer Softw... |
| CVE-2022-48341 | HIGH | 8.8 | 1.0% | Feb 23, 2023 | ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Adminis... |
| CVE-2022-48149 | CRITICAL | 9.8 | 0.6% | Feb 22, 2023 | Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via ... |
| CVE-2022-45600 | HIGH | 8.8 | 2.3% | Feb 22, 2023 | Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers... |
| CVE-2022-45599 | CRITICAL | 9.8 | 1.0% | Feb 22, 2023 | Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, al... |
| CVE-2022-39983 | CRITICAL | 9.8 | 1.4% | Feb 22, 2023 | File upload vulnerability in Pro Gamma Instant Developer RD3 22.5 r23, r30, and possibly earlier versions, allows attack... |
| CVE-2022-29273 | MEDIUM | 6.1 | 59.6% | Feb 22, 2023 | pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters. |
| CVE-2022-43873 | HIGH | 8.8 | 0.6% | Feb 22, 2023 | An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute c... |
| CVE-2022-43870 | MEDIUM | 6.5 | 0.6% | Feb 22, 2023 | IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files... |
| CVE-2022-43578 | MEDIUM | 5.4 | 0.4% | Feb 22, 2023 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-... |
| CVE-2022-41567 | MEDIUM | 5.4 | 0.4% | Feb 22, 2023 | The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerabi... |
| CVE-2022-41566 | MEDIUM | 5.4 | 0.4% | Feb 22, 2023 | The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows... |
| CVE-2022-41565 | MEDIUM | 5.4 | 0.4% | Feb 22, 2023 | The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now