2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38778 | MEDIUM | 6.5 | 0.9% | Feb 8, 2023 | A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated us... |
| CVE-2022-38777 | HIGH | 7.8 | 0.3% | Feb 8, 2023 | An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged... |
| CVE-2022-4450 | HIGH | 7.5 | 20.3% | Feb 8, 2023 | The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any h... |
| CVE-2022-4304 | MEDIUM | 5.9 | 16.2% | Feb 8, 2023 | A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a p... |
| CVE-2022-34350 | HIGH | 7.5 | 0.6% | Feb 8, 2023 | IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable t... |
| CVE-2022-45755 | MEDIUM | 5.4 | 0.4% | Feb 8, 2023 | Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page ... |
| CVE-2022-45527 | CRITICAL | 9.8 | 0.9% | Feb 8, 2023 | File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to d... |
| CVE-2022-45526 | CRITICAL | 9.8 | 1.0% | Feb 8, 2023 | SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbi... |
| CVE-2022-42438 | HIGH | 8.8 | 0.5% | Feb 8, 2023 | IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin function... |
| CVE-2022-35720 | MEDIUM | 5.5 | 0.1% | Feb 8, 2023 | IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptogr... |
| CVE-2022-34362 | MEDIUM | 4.6 | 0.4% | Feb 8, 2023 | IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the H... |
| CVE-2022-41620 | HIGH | 8.8 | 0.3% | Feb 8, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in SeoSamba for WordPress Webmasters plugin <= 1.0.5 versions. |
| CVE-2022-43765 | HIGH | 7.5 | 0.6% | Feb 8, 2023 | B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which ... |
| CVE-2022-43764 | CRITICAL | 9.8 | 0.8% | Feb 8, 2023 | Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07... |
| CVE-2022-43763 | HIGH | 7.5 | 0.6% | Feb 8, 2023 | Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server... |
| CVE-2022-43762 | CRITICAL | 9.8 | 0.6% | Feb 8, 2023 | Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages |
| CVE-2022-43761 | HIGH | 7.5 | 0.6% | Feb 8, 2023 | Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and ch... |
| CVE-2022-2094 | MEDIUM | 6.1 | 0.5% | Feb 8, 2023 | The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back ... |
| CVE-2022-45192 | MEDIUM | 6.5 | 0.2% | Feb 8, 2023 | An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of servi... |
| CVE-2022-45191 | MEDIUM | 6.5 | 0.2% | Feb 8, 2023 | An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of servi... |
| CVE-2022-45190 | MEDIUM | 5.3 | 0.3% | Feb 8, 2023 | An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in... |
| CVE-2022-40480 | MEDIUM | 6.5 | 0.3% | Feb 8, 2023 | Nordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attackers... |
| CVE-2022-47418 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site script... |
| CVE-2022-47419 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product ta... |
| CVE-2022-47417 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site script... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now