2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46101 | HIGH | 8.8 | 1.1% | Dec 22, 2022 | AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command executi... |
| CVE-2022-23541 | MEDIUM | 6.3 | 0.8% | Dec 22, 2022 | jsonwebtoken is an implementation of JSON Web Tokens. Versions `<= 8.5.1` of `jsonwebtoken` library can be misconfigured... |
| CVE-2022-44510 | MEDIUM | 5.4 | 0.5% | Dec 22, 2022 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
| CVE-2022-4516 | — | — | — | Dec 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2022-45966 | CRITICAL | 9.8 | 0.7% | Dec 22, 2022 | here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5. |
| CVE-2022-47896 | HIGH | 7.8 | 0.3% | Dec 22, 2022 | In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks. |
| CVE-2022-47895 | HIGH | 7.5 | 0.2% | Dec 22, 2022 | In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JA... |
| CVE-2022-45347 | CRITICAL | 9.8 | 1.4% | Dec 22, 2022 | Apache ShardingSphere-Proxy prior to 5.3.0 when using MySQL as database backend didn't cleanup the database session comp... |
| CVE-2022-41697 | MEDIUM | 5.3 | 20.2% | Dec 22, 2022 | A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted ... |
| CVE-2022-41654 | MEDIUM | 4.3 | 18.9% | Dec 22, 2022 | An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9... |
| CVE-2022-25948 | MEDIUM | 5.3 | 0.8% | Dec 22, 2022 | The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False... |
| CVE-2022-4647 | MEDIUM | 6.1 | 0.5% | Dec 22, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2. |
| CVE-2022-4646 | MEDIUM | 6.5 | 0.3% | Dec 22, 2022 | Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| CVE-2022-43271 | MEDIUM | 5.4 | 0.5% | Dec 22, 2022 | Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerabili... |
| CVE-2022-4644 | MEDIUM | 6.1 | 0.6% | Dec 22, 2022 | Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| CVE-2022-3189 | MEDIUM | 5.3 | 0.5% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script coul... |
| CVE-2022-3188 | MEDIUM | 5.3 | 0.5% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PH... |
| CVE-2022-3187 | MEDIUM | 5.3 | 0.5% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate whe... |
| CVE-2022-3186 | HIGH | 7.5 | 0.6% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an atta... |
| CVE-2022-3185 | MEDIUM | 5.3 | 0.5% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensit... |
| CVE-2022-3184 | CRITICAL | 9.8 | 11.6% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allo... |
| CVE-2022-3183 | CRITICAL | 9.8 | 1.6% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not saniti... |
| CVE-2022-4643 | CRITICAL | 9.8 | 1.7% | Dec 21, 2022 | A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the funct... |
| CVE-2022-4642 | MEDIUM | 5.4 | 0.5% | Dec 21, 2022 | A vulnerability was found in tatoeba2. It has been classified as problematic. This affects an unknown part of the compon... |
| CVE-2022-4641 | MEDIUM | 5.5 | 0.2% | Dec 21, 2022 | A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRe... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now