2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4147 | HIGH | 7.5 | 0.6% | Dec 6, 2022 | Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made... |
| CVE-2022-46161 | CRITICAL | 9.8 | 1.6% | Dec 6, 2022 | pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfm... |
| CVE-2022-46154 | HIGH | 7.5 | 0.8% | Dec 6, 2022 | Kodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not p... |
| CVE-2022-45548 | HIGH | 8.8 | 0.8% | Dec 6, 2022 | AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. |
| CVE-2022-43867 | HIGH | 7.8 | 0.3% | Dec 6, 2022 | IBM Spectrum Scale 5.1.0.1 through 5.1.4.1 could allow a local attacker to execute arbitrary commands in the container.... |
| CVE-2022-43369 | MEDIUM | 6.1 | 0.5% | Dec 6, 2022 | AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the compo... |
| CVE-2022-41560 | MEDIUM | 6.5 | 0.6% | Dec 6, 2022 | The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitab... |
| CVE-2022-41559 | CRITICAL | 9.3 | 0.7% | Dec 6, 2022 | The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows ... |
| CVE-2022-34361 | HIGH | 7.5 | 0.4% | Dec 6, 2022 | IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decr... |
| CVE-2022-23472 | HIGH | 7.5 | 0.8% | Dec 6, 2022 | Passeo is an open source python password generator. Versions prior to 1.0.5 rely on the python `random` library for rand... |
| CVE-2022-23470 | HIGH | 7.5 | 0.8% | Dec 6, 2022 | Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due ... |
| CVE-2022-23466 | MEDIUM | 5.4 | 0.4% | Dec 6, 2022 | teler is an real-time intrusion detection and threat alert dashboard. teler prior to version 2.0.0-rc.4 is vulnerable to... |
| CVE-2022-45326 | MEDIUM | 4.9 | 1.1% | Dec 6, 2022 | An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote... |
| CVE-2022-40680 | MEDIUM | 5.4 | 0.4% | Dec 6, 2022 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.1... |
| CVE-2022-38379 | MEDIUM | 5.4 | 0.4% | Dec 6, 2022 | Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allo... |
| CVE-2022-35843 | CRITICAL | 9.8 | 0.9% | Dec 6, 2022 | An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.... |
| CVE-2022-33876 | MEDIUM | 6.5 | 0.7% | Dec 6, 2022 | Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through ... |
| CVE-2022-33875 | HIGH | 8.8 | 0.7% | Dec 6, 2022 | An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiA... |
| CVE-2022-30305 | HIGH | 7.5 | 0.6% | Dec 6, 2022 | An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1... |
| CVE-2022-46382 | HIGH | 8.8 | 0.6% | Dec 6, 2022 | RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 h... |
| CVE-2022-44289 | HIGH | 8.8 | 2.9% | Dec 6, 2022 | Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell. |
| CVE-2022-43363 | MEDIUM | 6.1 | 0.4% | Dec 6, 2022 | Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website. NOTE: some third parties... |
| CVE-2022-41325 | HIGH | 7.8 | 0.6% | Dec 6, 2022 | An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user... |
| CVE-2022-38123 | HIGH | 7.2 | 0.7% | Dec 6, 2022 | Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrato... |
| CVE-2022-46383 | CRITICAL | 9.8 | 0.7% | Dec 6, 2022 | RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 h... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now