2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45009 | HIGH | 7.2 | 1.0% | Dec 7, 2022 | Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/cl... |
| CVE-2022-45008 | MEDIUM | 4.8 | 0.4% | Dec 7, 2022 | Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the c... |
| CVE-2022-44942 | HIGH | 8.1 | 0.9% | Dec 7, 2022 | Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function. |
| CVE-2022-44153 | MEDIUM | 6.1 | 0.4% | Dec 7, 2022 | Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-45918 | MEDIUM | 6.5 | 1.2% | Dec 7, 2022 | ILIAS before 7.16 allows External Control of File Name or Path. |
| CVE-2022-45917 | MEDIUM | 6.1 | 2.0% | Dec 7, 2022 | ILIAS before 7.16 has an Open Redirect. |
| CVE-2022-45916 | MEDIUM | 5.4 | 0.9% | Dec 7, 2022 | ILIAS before 7.16 allows XSS. |
| CVE-2022-45915 | HIGH | 8.8 | 4.7% | Dec 7, 2022 | ILIAS before 7.16 allows OS Command Injection. |
| CVE-2022-42329 | MEDIUM | 5.5 | 0.2% | Dec 7, 2022 | Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text expl... |
| CVE-2022-42328 | MEDIUM | 5.5 | 0.2% | Dec 7, 2022 | Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text expl... |
| CVE-2022-3643 | MEDIUM | 6.5 | 0.5% | Dec 7, 2022 | Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface res... |
| CVE-2022-44030 | HIGH | 7.5 | 0.6% | Dec 6, 2022 | Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permis... |
| CVE-2022-42699 | HIGH | 8.8 | 1.3% | Dec 6, 2022 | Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress. |
| CVE-2022-45833 | MEDIUM | 6.5 | 0.8% | Dec 6, 2022 | Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress. |
| CVE-2022-45829 | HIGH | 8.1 | 0.8% | Dec 6, 2022 | Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 at WordPress. |
| CVE-2022-45816 | MEDIUM | 5.4 | 0.4% | Dec 6, 2022 | Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress. |
| CVE-2022-41910 | CRITICAL | 9.1 | 0.4% | Dec 6, 2022 | TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that d... |
| CVE-2022-41902 | CRITICAL | 9.1 | 0.4% | Dec 6, 2022 | TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that d... |
| CVE-2022-45848 | MEDIUM | 6.1 | 0.4% | Dec 6, 2022 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin <= 13.1.0.9 on WordPress. |
| CVE-2022-45359 | CRITICAL | 9.8 | 13.5% | Dec 6, 2022 | Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress. |
| CVE-2022-42888 | HIGH | 8.8 | 0.7% | Dec 6, 2022 | Unauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress. |
| CVE-2022-46333 | HIGH | 7.2 | 1.5% | Dec 6, 2022 | The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that e... |
| CVE-2022-46332 | CRITICAL | 9.6 | 0.6% | Dec 6, 2022 | The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vuln... |
| CVE-2022-44900 | CRITICAL | 9.1 | 2.2% | Dec 6, 2022 | A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and ea... |
| CVE-2022-23475 | HIGH | 8.8 | 0.5% | Dec 6, 2022 | daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now