2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45297 | CRITICAL | 9.8 | 2.8% | Jan 31, 2023 | EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter. |
| CVE-2022-37708 | — | — | — | Jan 31, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-32984 | HIGH | 7.5 | 1.0% | Jan 31, 2023 | BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale a... |
| CVE-2022-47854 | CRITICAL | 9.8 | 0.9% | Jan 31, 2023 | i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php. |
| CVE-2022-47701 | MEDIUM | 6.1 | 0.4% | Jan 31, 2023 | COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross... |
| CVE-2022-47700 | HIGH | 7.5 | 0.5% | Jan 31, 2023 | COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerab... |
| CVE-2022-47699 | CRITICAL | 9.8 | 0.6% | Jan 31, 2023 | COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incor... |
| CVE-2022-47698 | MEDIUM | 6.1 | 0.4% | Jan 31, 2023 | COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross... |
| CVE-2022-47697 | CRITICAL | 9.8 | 0.6% | Jan 31, 2023 | COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerab... |
| CVE-2022-45172 | CRITICAL | 9.8 | 1.1% | Jan 31, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/re... |
| CVE-2022-47780 | CRITICAL | 9.8 | 0.9% | Jan 31, 2023 | SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter. |
| CVE-2022-47035 | CRITICAL | 9.8 | 1.2% | Jan 31, 2023 | Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary ... |
| CVE-2022-45598 | MEDIUM | 6.1 | 0.5% | Jan 31, 2023 | Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via im... |
| CVE-2022-28331 | CRITICAL | 9.8 | 1.6% | Jan 31, 2023 | On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sen... |
| CVE-2022-25147 | MEDIUM | 6.5 | 1.4% | Jan 31, 2023 | Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allow... |
| CVE-2022-24963 | CRITICAL | 9.8 | 1.5% | Jan 31, 2023 | Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker... |
| CVE-2022-46835 | HIGH | 7.5 | 0.9% | Jan 31, 2023 | IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, Identity... |
| CVE-2022-45435 | MEDIUM | 6.5 | 0.4% | Jan 31, 2023 | IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, Identity... |
| CVE-2022-44645 | HIGH | 8.8 | 1.9% | Jan 31, 2023 | In Apache Linkis <=1.3.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code... |
| CVE-2022-44644 | MEDIUM | 6.5 | 1.2% | Jan 31, 2023 | In Apache Linkis <=1.3.0 when used with the MySQL Connector/J in the data source module, an authenticated attacker could... |
| CVE-2022-39061 | MEDIUM | 6.5 | 0.7% | Jan 31, 2023 | ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for... |
| CVE-2022-39060 | CRITICAL | 9.8 | 0.9% | Jan 31, 2023 | ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote ... |
| CVE-2022-39059 | HIGH | 7.5 | 1.0% | Jan 31, 2023 | ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unau... |
| CVE-2022-45789 | CRITICAL | 9.8 | 1.4% | Jan 31, 2023 | A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbu... |
| CVE-2022-25979 | MEDIUM | 6.1 | 0.6% | Jan 31, 2023 | Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input san... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now