2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21953 | HIGH | 8.8 | 0.5% | Feb 7, 2023 | A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod a... |
| CVE-2022-21948 | MEDIUM | 6.1 | 0.5% | Feb 7, 2023 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows re... |
| CVE-2022-31254 | HIGH | 7.8 | 0.2% | Feb 7, 2023 | A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 1... |
| CVE-2022-42291 | MEDIUM | 5.5 | 0.2% | Feb 7, 2023 | NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experie... |
| CVE-2022-31611 | HIGH | 7.3 | 0.2% | Feb 7, 2023 | NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an att... |
| CVE-2022-45854 | MEDIUM | 4.3 | 0.3% | Feb 7, 2023 | An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow ... |
| CVE-2022-45441 | MEDIUM | 6.1 | 0.4% | Feb 7, 2023 | A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could... |
| CVE-2022-38547 | HIGH | 7.2 | 2.8% | Feb 7, 2023 | A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.... |
| CVE-2022-46496 | MEDIUM | 5.9 | 0.9% | Feb 6, 2023 | BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate. |
| CVE-2022-44617 | HIGH | 7.5 | 1.2% | Feb 6, 2023 | A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will b... |
| CVE-2022-3229 | CRITICAL | 9.8 | 66.4% | Feb 6, 2023 | Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication... |
| CVE-2022-28923 | MEDIUM | 6.1 | 1.4% | Feb 6, 2023 | Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phi... |
| CVE-2022-48166 | HIGH | 7.5 | 2.8% | Feb 6, 2023 | An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configur... |
| CVE-2022-48311 | CRITICAL | 9 | 1.0% | Feb 6, 2023 | **UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR... |
| CVE-2022-45589 | HIGH | 7.2 | 0.6% | Feb 6, 2023 | All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL ... |
| CVE-2022-44268 | MEDIUM | 6.5 | 89.9% | Feb 6, 2023 | ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti... |
| CVE-2022-44267 | MEDIUM | 6.5 | 76.6% | Feb 6, 2023 | ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert proc... |
| CVE-2022-42951 | HIGH | 8.1 | 0.7% | Feb 6, 2023 | An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. Duri... |
| CVE-2022-42950 | MEDIUM | 4.9 | 1.0% | Feb 6, 2023 | An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an... |
| CVE-2022-42439 | MEDIUM | 4.9 | 0.7% | Feb 6, 2023 | IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability ... |
| CVE-2022-4838 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outp... |
| CVE-2022-4836 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode attributes before outpu... |
| CVE-2022-4833 | MEDIUM | 5.4 | 0.5% | Feb 6, 2023 | The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some... |
| CVE-2022-4826 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The Simple Tooltips WordPress plugin before 2.1.4 does not validate and escape some of its shortcode attributes before o... |
| CVE-2022-4825 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The WP-ShowHide WordPress plugin before 1.05 does not validate and escape some of its shortcode attributes before output... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now