2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40626 | MEDIUM | 6.1 | 0.7% | Sep 14, 2022 | An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to oth... |
| CVE-2022-37139 | MEDIUM | 5.4 | 0.5% | Sep 14, 2022 | Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability. |
| CVE-2022-37137 | MEDIUM | 5.4 | 0.5% | Sep 14, 2022 | PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. The XSS can be obtain from i... |
| CVE-2022-36668 | MEDIUM | 5.4 | 0.5% | Sep 14, 2022 | Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabiliti... |
| CVE-2022-38770 | MEDIUM | 5.3 | 0.6% | Sep 13, 2022 | The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other use... |
| CVE-2022-37191 | MEDIUM | 6.5 | 2.5% | Sep 13, 2022 | The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files v... |
| CVE-2022-31861 | MEDIUM | 5.4 | 0.5% | Sep 13, 2022 | Cross site Scripting (XSS) in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs. |
| CVE-2022-31324 | MEDIUM | 6.5 | 0.4% | Sep 13, 2022 | An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 ... |
| CVE-2022-39816 | MEDIUM | 6.5 | 0.5% | Sep 13, 2022 | In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit confi... |
| CVE-2022-39814 | MEDIUM | 6.1 | 0.4% | Sep 13, 2022 | In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter. |
| CVE-2022-38497 | MEDIUM | 5.5 | 0.3% | Sep 13, 2022 | LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69. |
| CVE-2022-38496 | MEDIUM | 5.5 | 0.3% | Sep 13, 2022 | LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp. |
| CVE-2022-38329 | MEDIUM | 4.3 | 0.4% | Sep 13, 2022 | A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, po... |
| CVE-2022-38307 | MEDIUM | 5.5 | 0.3% | Sep 13, 2022 | LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::fil... |
| CVE-2022-35637 | MEDIUM | 6.5 | 1.0% | Sep 13, 2022 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering ... |
| CVE-2022-34336 | MEDIUM | 5.4 | 0.4% | Sep 13, 2022 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows... |
| CVE-2022-22483 | MEDIUM | 6.5 | 0.8% | Sep 13, 2022 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some s... |
| CVE-2022-22330 | MEDIUM | 5.3 | 0.7% | Sep 13, 2022 | IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the H... |
| CVE-2022-22329 | MEDIUM | 4.3 | 0.5% | Sep 13, 2022 | IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be ab... |
| CVE-2022-3205 | MEDIUM | 6.1 | 0.4% | Sep 13, 2022 | Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project na... |
| CVE-2022-38342 | MEDIUM | 6.5 | 0.5% | Sep 13, 2022 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerab... |
| CVE-2022-32244 | MEDIUM | 5.2 | 0.5% | Sep 13, 2022 | Under certain conditions an attacker authenticated as a CMS administrator access the BOE Commentary database and retriev... |
| CVE-2022-20399 | MEDIUM | 5.5 | 0.1% | Sep 13, 2022 | In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default ... |
| CVE-2022-20396 | MEDIUM | 5.5 | 0.1% | Sep 13, 2022 | In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or us... |
| CVE-2022-20393 | MEDIUM | 5.5 | 0.1% | Sep 13, 2022 | In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overf... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now