2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41263 | MEDIUM | 4.3 | 0.2% | Dec 12, 2022 | Due to a missing authentication check, SAP Business Objects Business Intelligence Platform (Web Intelligence) - versions... |
| CVE-2022-41262 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, allows an unauthenti... |
| CVE-2022-41261 | MEDIUM | 5.5 | 0.2% | Dec 12, 2022 | SAP Solution Manager (Diagnostic Agent) - version 7.20, allows an authenticated attacker on Windows system to access a f... |
| CVE-2022-0925 | — | — | — | Dec 12, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-46906 | MEDIUM | 5.4 | 0.3% | Dec 12, 2022 | Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary H... |
| CVE-2022-46905 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary... |
| CVE-2022-46904 | MEDIUM | 5.4 | 0.3% | Dec 12, 2022 | Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary H... |
| CVE-2022-46903 | MEDIUM | 5.4 | 0.3% | Dec 12, 2022 | Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary H... |
| CVE-2022-45275 | HIGH | 7.2 | 15.3% | Dec 12, 2022 | An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic Transaction Queuing Sy... |
| CVE-2022-42716 | HIGH | 8.8 | 1.3% | Dec 12, 2022 | An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make imp... |
| CVE-2022-4314 | CRITICAL | 9.8 | 0.8% | Dec 12, 2022 | Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. |
| CVE-2022-4312 | MEDIUM | 5.5 | 0.1% | Dec 12, 2022 | A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could all... |
| CVE-2022-4311 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This coul... |
| CVE-2022-4097 | MEDIUM | 5.3 | 0.6% | Dec 12, 2022 | The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to by... |
| CVE-2022-4016 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.6, B... |
| CVE-2022-4010 | MEDIUM | 4.8 | 0.5% | Dec 12, 2022 | The Image Hover Effects WordPress plugin before 5.5 does not sanitise and escape some of its settings, which could allow... |
| CVE-2022-4005 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | The Donation Button WordPress plugin through 4.0.0 does not sanitize and escapes some parameters, which could allow user... |
| CVE-2022-4004 | MEDIUM | 4.3 | 0.5% | Dec 12, 2022 | The Donation Button WordPress plugin through 4.0.0 does not properly check for privileges and nonce tokens in its "donat... |
| CVE-2022-4000 | MEDIUM | 4.8 | 0.5% | Dec 12, 2022 | The WooCommerce Shipping WordPress plugin through 1.2.11 does not sanitise and escape some of its settings, which could ... |
| CVE-2022-41881 | HIGH | 7.5 | 1.5% | Dec 12, 2022 | Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackO... |
| CVE-2022-3999 | HIGH | 8.1 | 0.4% | Dec 12, 2022 | The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which cou... |
| CVE-2022-3989 | HIGH | 8.8 | 1.0% | Dec 12, 2022 | The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .ph... |
| CVE-2022-3982 | CRITICAL | 9.8 | 4.5% | Dec 12, 2022 | The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which c... |
| CVE-2022-3981 | HIGH | 8.8 | 0.7% | Dec 12, 2022 | The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a... |
| CVE-2022-3946 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing an... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now