2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4889 | CRITICAL | 9.8 | 0.6% | Jan 15, 2023 | A vulnerability classified as critical was found in visegripped Stracker. Affected by this vulnerability is the function... |
| CVE-2022-2815 | MEDIUM | 6.5 | 0.6% | Jan 14, 2023 | Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10. |
| CVE-2022-1812 | CRITICAL | 9.8 | 30.8% | Jan 14, 2023 | Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10. |
| CVE-2022-45353 | HIGH | 8.1 | 0.5% | Jan 14, 2023 | Broken Access Control in Betheme theme <= 26.6.1 on WordPress. |
| CVE-2022-38467 | MEDIUM | 6.1 | 0.8% | Jan 14, 2023 | Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver. |
| CVE-2022-38287 | — | — | — | Jan 14, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-41956 | MEDIUM | 6.5 | 1.8% | Jan 14, 2023 | Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that en... |
| CVE-2022-41955 | HIGH | 8.8 | 1.5% | Jan 14, 2023 | Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that en... |
| CVE-2022-23532 | MEDIUM | 6.5 | 0.7% | Jan 14, 2023 | APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j that provides hundreds of procedures and functions. A... |
| CVE-2022-41721 | HIGH | 7.5 | 1.8% | Jan 13, 2023 | A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP reque... |
| CVE-2022-46093 | HIGH | 8.2 | 0.7% | Jan 13, 2023 | Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the ... |
| CVE-2022-45299 | CRITICAL | 9.8 | 1.3% | Jan 13, 2023 | An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplyi... |
| CVE-2022-42136 | HIGH | 8.8 | 0.9% | Jan 13, 2023 | Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where... |
| CVE-2022-46956 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46955 | CRITICAL | 9.8 | 0.6% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46954 | CRITICAL | 9.8 | 0.6% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46953 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46952 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46951 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46950 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46949 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes... |
| CVE-2022-46947 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes... |
| CVE-2022-46946 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes... |
| CVE-2022-48091 | MEDIUM | 5.4 | 0.4% | Jan 13, 2023 | Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting (XSS) via process_update_profile.php. |
| CVE-2022-48090 | MEDIUM | 6.5 | 0.7% | Jan 13, 2023 | Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now