2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45492 | HIGH | 7.8 | 0.2% | Feb 3, 2023 | Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b15... |
| CVE-2022-45491 | HIGH | 7.8 | 0.3% | Feb 3, 2023 | Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153... |
| CVE-2022-42909 | MEDIUM | 5.4 | 0.4% | Feb 3, 2023 | WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and ass... |
| CVE-2022-42908 | MEDIUM | 5.4 | 0.4% | Feb 3, 2023 | WEPA Print Away is vulnerable to a stored XSS. It does not properly sanitize uploaded filenames, allowing an attacker to... |
| CVE-2022-31733 | CRITICAL | 9.1 | 0.4% | Feb 3, 2023 | Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are acc... |
| CVE-2022-34138 | HIGH | 7.5 | 0.6% | Feb 3, 2023 | Insecure direct object references (IDOR) in the web server of Biltema IP and Baby Camera Software v124 allows attackers ... |
| CVE-2022-48074 | MEDIUM | 5.3 | 0.2% | Feb 3, 2023 | An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file. |
| CVE-2022-4634 | HIGH | 7.8 | 5.3% | Feb 3, 2023 | All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vu... |
| CVE-2022-48023 | MEDIUM | 4.3 | 0.4% | Feb 3, 2023 | Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of ... |
| CVE-2022-48022 | MEDIUM | 4.3 | 0.5% | Feb 3, 2023 | An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to vie... |
| CVE-2022-48021 | CRITICAL | 9.8 | 0.9% | Feb 3, 2023 | A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message... |
| CVE-2022-47132 | HIGH | 8.8 | 0.9% | Feb 3, 2023 | A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users. |
| CVE-2022-47131 | MEDIUM | 4.8 | 0.4% | Feb 3, 2023 | A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page. |
| CVE-2022-47130 | MEDIUM | 4.3 | 0.6% | Feb 3, 2023 | A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an... |
| CVE-2022-38389 | CRITICAL | 9.1 | 1.3% | Feb 3, 2023 | IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when pro... |
| CVE-2022-22486 | CRITICAL | 9.1 | 1.4% | Feb 3, 2023 | IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when pro... |
| CVE-2022-48114 | CRITICAL | 9.8 | 0.9% | Feb 2, 2023 | RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable. |
| CVE-2022-48113 | CRITICAL | 9.8 | 0.9% | Feb 2, 2023 | A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet servic... |
| CVE-2022-48140 | MEDIUM | 5.4 | 0.4% | Feb 2, 2023 | DedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /file_manage_view.... |
| CVE-2022-48130 | CRITICAL | 9.8 | 0.9% | Feb 2, 2023 | Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the para... |
| CVE-2022-48082 | CRITICAL | 9.8 | 0.6% | Feb 2, 2023 | Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.as... |
| CVE-2022-48079 | CRITICAL | 9.8 | 1.4% | Feb 2, 2023 | Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execu... |
| CVE-2022-46842 | HIGH | 8.8 | 0.3% | Feb 2, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in JS Help Desk plugin <= 2.7.1 versions. |
| CVE-2022-46815 | HIGH | 8.8 | 0.3% | Feb 2, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin ... |
| CVE-2022-45807 | HIGH | 8.8 | 0.3% | Feb 2, 2023 | Cross-Site Request Forgery (CSRF) in WPVibes WP Mail Log plugin <= 1.0.1 versions. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now