2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47416 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the i... |
| CVE-2022-47415 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site script... |
| CVE-2022-47414 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in ... |
| CVE-2022-47413 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II")... |
| CVE-2022-46663 | HIGH | 7.5 | 1.4% | Feb 7, 2023 | In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal. |
| CVE-2022-45768 | HIGH | 8.8 | 28.7% | Feb 7, 2023 | Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker ... |
| CVE-2022-47412 | MEDIUM | 5.4 | 0.6% | Feb 7, 2023 | Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, ... |
| CVE-2022-4883 | HIGH | 8.8 | 1.2% | Feb 7, 2023 | A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to comp... |
| CVE-2022-46285 | HIGH | 7.5 | 1.3% | Feb 7, 2023 | A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition w... |
| CVE-2022-24990 | HIGH | 7.5 | 84.0% | Feb 7, 2023 | TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen... |
| CVE-2022-41313 | MEDIUM | 5.4 | 1.1% | Feb 7, 2023 | A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri... |
| CVE-2022-41312 | MEDIUM | 5.4 | 1.1% | Feb 7, 2023 | A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri... |
| CVE-2022-41311 | MEDIUM | 5.4 | 1.0% | Feb 7, 2023 | A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri... |
| CVE-2022-40693 | HIGH | 7.5 | 0.6% | Feb 7, 2023 | A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Et... |
| CVE-2022-40691 | MEDIUM | 5.3 | 1.5% | Feb 7, 2023 | An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial E... |
| CVE-2022-40224 | HIGH | 7.5 | 64.7% | Feb 7, 2023 | A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Swi... |
| CVE-2022-46621 | — | — | — | Feb 7, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-46620 | — | — | — | Feb 7, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-45544 | HIGH | 8.8 | 1.3% | Feb 7, 2023 | Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and exe... |
| CVE-2022-43759 | HIGH | 8.8 | 0.7% | Feb 7, 2023 | A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to... |
| CVE-2022-43758 | MEDIUM | 6.8 | 1.0% | Feb 7, 2023 | A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE Ranch... |
| CVE-2022-43757 | HIGH | 8.8 | 0.6% | Feb 7, 2023 | A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain acce... |
| CVE-2022-43756 | HIGH | 7.5 | 0.7% | Feb 7, 2023 | A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in SU... |
| CVE-2022-43755 | CRITICAL | 9.8 | 1.7% | Feb 7, 2023 | A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to conti... |
| CVE-2022-31249 | CRITICAL | 9.8 | 3.8% | Feb 7, 2023 | A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler o... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now