2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47040 | HIGH | 7.8 | 0.3% | Jan 26, 2023 | An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running ... |
| CVE-2022-46999 | CRITICAL | 9.8 | 1.0% | Jan 26, 2023 | Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserCont... |
| CVE-2022-46998 | CRITICAL | 9.8 | 1.1% | Jan 26, 2023 | An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF). |
| CVE-2022-46957 | MEDIUM | 6.1 | 0.5% | Jan 26, 2023 | Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-46624 | MEDIUM | 6.1 | 0.5% | Jan 26, 2023 | A cross-site scripting (XSS) vulnerability in Online Graduate Tracer System v1.0.0 allows attackers to execute arbitrary... |
| CVE-2022-46128 | MEDIUM | 6.1 | 0.5% | Jan 26, 2023 | phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=. |
| CVE-2022-45920 | HIGH | 7.5 | 0.9% | Jan 26, 2023 | In Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak. |
| CVE-2022-45820 | HIGH | 8.8 | 1.0% | Jan 26, 2023 | SQL Injection (SQLi) vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. |
| CVE-2022-45808 | CRITICAL | 9.8 | 4.3% | Jan 26, 2023 | SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. |
| CVE-2022-45730 | MEDIUM | 6.1 | 0.5% | Jan 26, 2023 | A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute ar... |
| CVE-2022-44297 | CRITICAL | 9.8 | 1.0% | Jan 26, 2023 | SiteServer CMS 7.1.3 has a SQL injection vulnerability the background. |
| CVE-2022-44018 | HIGH | 7.5 | 0.8% | Jan 26, 2023 | In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer ... |
| CVE-2022-43997 | HIGH | 7.8 | 0.4% | Jan 26, 2023 | Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. ... |
| CVE-2022-43917 | HIGH | 7.5 | 0.5% | Jan 26, 2023 | IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that co... |
| CVE-2022-43864 | HIGH | 7.5 | 2.0% | Jan 26, 2023 | IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacke... |
| CVE-2022-42330 | HIGH | 7.5 | 1.4% | Jan 26, 2023 | Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libx... |
| CVE-2022-41941 | MEDIUM | 4.8 | 0.6% | Jan 26, 2023 | GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cros... |
| CVE-2022-40175 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40174 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40173 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40172 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40171 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40170 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40169 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40168 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now