2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46682 | CRITICAL | 9.8 | 0.9% | Dec 12, 2022 | Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2022-45797 | HIGH | 7.1 | 0.6% | Dec 12, 2022 | An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro ... |
| CVE-2022-41296 | HIGH | 8.8 | 0.5% | Dec 12, 2022 | IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou... |
| CVE-2022-3641 | HIGH | 8.8 | 0.6% | Dec 12, 2022 | Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows ... |
| CVE-2022-20968 | HIGH | 8.8 | 6.4% | Dec 12, 2022 | A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could... |
| CVE-2022-20691 | MEDIUM | 6.5 | 0.6% | Dec 12, 2022 | A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmwar... |
| CVE-2022-20690 | HIGH | 8.8 | 0.7% | Dec 12, 2022 | Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter ... |
| CVE-2022-20689 | HIGH | 8.8 | 0.6% | Dec 12, 2022 | Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter ... |
| CVE-2022-20688 | MEDIUM | 5.3 | 0.9% | Dec 12, 2022 | A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware ... |
| CVE-2022-20687 | MEDIUM | 5.3 | 0.9% | Dec 12, 2022 | Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Teleph... |
| CVE-2022-20686 | MEDIUM | 5.3 | 0.9% | Dec 12, 2022 | Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Teleph... |
| CVE-2022-4416 | HIGH | 8.8 | 0.5% | Dec 12, 2022 | A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function ... |
| CVE-2022-46908 | HIGH | 7.3 | 0.4% | Dec 12, 2022 | SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the ... |
| CVE-2022-31596 | MEDIUM | 6 | 0.7% | Dec 12, 2022 | Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Networ... |
| CVE-2022-25837 | HIGH | 7.5 | 0.4% | Dec 12, 2022 | Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire cred... |
| CVE-2022-25836 | HIGH | 7.5 | 0.4% | Dec 12, 2022 | Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to ac... |
| CVE-2022-45760 | HIGH | 8.8 | 0.6% | Dec 12, 2022 | SENS v1.0 is vulnerable to Incorrect Access Control vulnerability. |
| CVE-2022-45759 | HIGH | 8.8 | 0.6% | Dec 12, 2022 | SENS v1.0 has a file upload vulnerability. |
| CVE-2022-45758 | MEDIUM | 5.4 | 0.3% | Dec 12, 2022 | SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister. |
| CVE-2022-45756 | MEDIUM | 6.1 | 0.3% | Dec 12, 2022 | SENS v1.0 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-45228 | LOW | 3.5 | 0.2% | Dec 12, 2022 | Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page. |
| CVE-2022-45227 | HIGH | 7.5 | 0.7% | Dec 12, 2022 | The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. Thi... |
| CVE-2022-44637 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization ... |
| CVE-2022-44031 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization ... |
| CVE-2022-4414 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now