2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40697 | MEDIUM | 4.8 | 0.4% | Jan 19, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 3com – Asesor de Cookies para normativa española plugi... |
| CVE-2022-39167 | MEDIUM | 5.9 | 0.6% | Jan 19, 2023 | IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information... |
| CVE-2022-1676 | — | — | — | Jan 19, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-47105 | CRITICAL | 9.8 | 1.1% | Jan 19, 2023 | Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. |
| CVE-2022-3738 | MEDIUM | 5.9 | 0.6% | Jan 19, 2023 | The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file mi... |
| CVE-2022-4892 | MEDIUM | 6.1 | 0.5% | Jan 19, 2023 | A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function build_view of the f... |
| CVE-2022-3085 | HIGH | 7.8 | 0.2% | Jan 19, 2023 | Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which... |
| CVE-2022-4235 | MEDIUM | 5.4 | 0.6% | Jan 18, 2023 | RushBet version 2022.23.1-b490616d allows a remote attacker to steal customer accounts via use of a malicious applicatio... |
| CVE-2022-45927 | HIGH | 8.8 | 1.9% | Jan 18, 2023 | An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Java application server can be used ... |
| CVE-2022-45923 | HIGH | 8.8 | 1.9% | Jan 18, 2023 | An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Common Gateway Interface (CGI) progr... |
| CVE-2022-45928 | HIGH | 8.8 | 1.7% | Jan 18, 2023 | A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). Multiple endpoin... |
| CVE-2022-45926 | HIGH | 8.8 | 17.0% | Jan 18, 2023 | An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint notify.localizeEmailTemplat... |
| CVE-2022-45925 | HIGH | 7.5 | 16.9% | Jan 18, 2023 | An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The action xmlexport accepts the paramet... |
| CVE-2022-45924 | HIGH | 8.1 | 1.4% | Jan 18, 2023 | An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint itemtemplate.createtemplate... |
| CVE-2022-45922 | HIGH | 8.8 | 1.6% | Jan 18, 2023 | An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The request handler for ll.KeepAliveSess... |
| CVE-2022-47990 | HIGH | 7.8 | 0.2% | Jan 18, 2023 | IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in X11 to cause... |
| CVE-2022-47966 | CRITICAL | 9.8 | 99.8% | Jan 18, 2023 | Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due ... |
| CVE-2022-45613 | MEDIUM | 5.4 | 0.5% | Jan 18, 2023 | Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index... |
| CVE-2022-47950 | MEDIUM | 6.5 | 1.0% | Jan 18, 2023 | An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML fil... |
| CVE-2022-3100 | MEDIUM | 5.9 | 0.4% | Jan 18, 2023 | A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when ... |
| CVE-2022-46505 | HIGH | 7.5 | 0.9% | Jan 18, 2023 | An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the mi... |
| CVE-2022-47881 | MEDIUM | 6.5 | 0.7% | Jan 18, 2023 | Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability. |
| CVE-2022-45103 | MEDIUM | 6.5 | 0.7% | Jan 18, 2023 | Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information ... |
| CVE-2022-41417 | CRITICAL | 9.8 | 0.8% | Jan 18, 2023 | BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/. |
| CVE-2022-34457 | HIGH | 7.8 | 0.2% | Jan 18, 2023 | Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default pa... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now