2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39073 | CRITICAL | 9.8 | 3.3% | Jan 6, 2023 | There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an att... |
| CVE-2022-39072 | MEDIUM | 5.4 | 0.3% | Jan 6, 2023 | There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input... |
| CVE-2022-44149 | HIGH | 8.8 | 64.4% | Jan 6, 2023 | The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by... |
| CVE-2022-4879 | HIGH | 7.5 | 0.5% | Jan 6, 2023 | A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vuln... |
| CVE-2022-4878 | MEDIUM | 5.3 | 0.7% | Jan 6, 2023 | A vulnerability classified as critical has been found in JATOS. Affected is the function ZipUtil of the file modules/com... |
| CVE-2022-45935 | MEDIUM | 5.5 | 0.4% | Jan 6, 2023 | Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to ac... |
| CVE-2022-45787 | MEDIUM | 5.5 | 0.3% | Jan 6, 2023 | Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclo... |
| CVE-2022-25923 | CRITICAL | 9.8 | 2.6% | Jan 6, 2023 | Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionali... |
| CVE-2022-42979 | HIGH | 8.8 | 24.3% | Jan 6, 2023 | Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows ... |
| CVE-2022-44870 | MEDIUM | 6.1 | 0.5% | Jan 6, 2023 | A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary w... |
| CVE-2022-40049 | HIGH | 7.5 | 1.0% | Jan 6, 2023 | SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive ... |
| CVE-2022-44541 | — | — | — | Jan 6, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2022-44540 | — | — | — | Jan 6, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2022-44539 | — | — | — | Jan 6, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2022-44538 | — | — | — | Jan 6, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2022-44537 | — | — | — | Jan 6, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2022-44536 | — | — | — | Jan 6, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2022-44877 | CRITICAL | 9.8 | 100.0% | Jan 5, 2023 | login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execut... |
| CVE-2022-3929 | CRITICAL | 9.8 | 0.4% | Jan 5, 2023 | Communication between the client and the server application of the affected products is partially done using CORBA (Com... |
| CVE-2022-3928 | MEDIUM | 5.5 | 0.2% | Jan 5, 2023 | Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerabili... |
| CVE-2022-3927 | CRITICAL | 9.8 | 0.6% | Jan 5, 2023 | The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) fi... |
| CVE-2022-47544 | CRITICAL | 9.8 | 0.7% | Jan 5, 2023 | An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed. |
| CVE-2022-47543 | MEDIUM | 5.3 | 0.4% | Jan 5, 2023 | An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects. |
| CVE-2022-46177 | HIGH | 8.1 | 0.7% | Jan 5, 2023 | Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta... |
| CVE-2022-23549 | MEDIUM | 6.5 | 0.6% | Jan 5, 2023 | Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now