2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-48124 | CRITICAL | 9.8 | 2.0% | Jan 20, 2023 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName para... |
| CVE-2022-48123 | CRITICAL | 9.8 | 2.0% | Jan 20, 2023 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername pa... |
| CVE-2022-48122 | CRITICAL | 9.8 | 2.0% | Jan 20, 2023 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid para... |
| CVE-2022-48121 | CRITICAL | 9.8 | 2.0% | Jan 20, 2023 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits param... |
| CVE-2022-43959 | MEDIUM | 4.9 | 1.0% | Jan 20, 2023 | Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remot... |
| CVE-2022-41441 | MEDIUM | 6.1 | 5.3% | Jan 20, 2023 | Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts o... |
| CVE-2022-40267 | CRITICAL | 9.1 | 1.2% | Jan 20, 2023 | Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F S... |
| CVE-2022-48191 | HIGH | 7 | 0.2% | Jan 20, 2023 | A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malic... |
| CVE-2022-20967 | MEDIUM | 5.4 | 0.5% | Jan 20, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2022-20966 | MEDIUM | 5.4 | 27.6% | Jan 20, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2022-20965 | MEDIUM | 5.4 | 0.6% | Jan 20, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2022-20964 | HIGH | 8.8 | 30.6% | Jan 20, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2022-46476 | CRITICAL | 9.8 | 41.1% | Jan 19, 2023 | D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soap... |
| CVE-2022-31901 | MEDIUM | 6.5 | 1.3% | Jan 19, 2023 | Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the appli... |
| CVE-2022-47766 | HIGH | 8.8 | 0.8% | Jan 19, 2023 | PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability. |
| CVE-2022-46890 | MEDIUM | 4.3 | 0.6% | Jan 19, 2023 | Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is ... |
| CVE-2022-46889 | MEDIUM | 5.4 | 60.1% | Jan 19, 2023 | A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to... |
| CVE-2022-46888 | MEDIUM | 6.1 | 1.5% | Jan 19, 2023 | Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to injec... |
| CVE-2022-46887 | CRITICAL | 9.8 | 19.4% | Jan 19, 2023 | Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL command... |
| CVE-2022-47745 | HIGH | 8.8 | 15.4% | Jan 19, 2023 | ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection... |
| CVE-2022-47740 | CRITICAL | 9.8 | 0.8% | Jan 19, 2023 | Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php. |
| CVE-2022-47197 | MEDIUM | 5.4 | 1.0% | Jan 19, 2023 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins... |
| CVE-2022-47196 | MEDIUM | 5.4 | 0.7% | Jan 19, 2023 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins... |
| CVE-2022-47195 | MEDIUM | 5.4 | 0.7% | Jan 19, 2023 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins... |
| CVE-2022-47194 | MEDIUM | 5.4 | 0.8% | Jan 19, 2023 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now