2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39091 | HIGH | 7.8 | 0.1% | Dec 6, 2022 | In power management service, there is a missing permission check. This could lead to set up power management service wit... |
| CVE-2022-39090 | HIGH | 7.8 | 0.1% | Dec 6, 2022 | In power management service, there is a missing permission check. This could lead to set up power management service wit... |
| CVE-2022-25912 | CRITICAL | 9.8 | 2.8% | Dec 6, 2022 | The package simple-git before 3.15.0 are vulnerable to Remote Code Execution (RCE) when enabling the ext transport proto... |
| CVE-2022-24439 | CRITICAL | 9.8 | 5.4% | Dec 6, 2022 | All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, w... |
| CVE-2022-40603 | MEDIUM | 6.1 | 0.4% | Dec 6, 2022 | A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through ... |
| CVE-2022-34881 | LOW | 3.3 | 0.2% | Dec 6, 2022 | Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows loc... |
| CVE-2022-46151 | MEDIUM | 6.1 | 0.4% | Dec 6, 2022 | Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field ... |
| CVE-2022-4173 | HIGH | 8.8 | 0.7% | Dec 6, 2022 | A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write acces... |
| CVE-2022-45283 | HIGH | 7.8 | 0.4% | Dec 6, 2022 | GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_a... |
| CVE-2022-44009 | HIGH | 7.5 | 0.6% | Dec 6, 2022 | Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, all... |
| CVE-2022-40918 | CRITICAL | 9.8 | 1.8% | Dec 6, 2022 | Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacke... |
| CVE-2022-38337 | CRITICAL | 9.1 | 0.7% | Dec 6, 2022 | When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this... |
| CVE-2022-38336 | HIGH | 8.1 | 0.8% | Dec 6, 2022 | An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP... |
| CVE-2022-46464 | — | — | — | Dec 5, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-45990 | MEDIUM | 6.1 | 0.5% | Dec 5, 2022 | A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attacker... |
| CVE-2022-45769 | MEDIUM | 6.1 | 0.5% | Dec 5, 2022 | A cross-site scripting (XSS) vulnerability in ClicShopping_V3 v3.402 allows attackers to execute arbitrary web scripts o... |
| CVE-2022-45020 | HIGH | 8.8 | 0.6% | Dec 5, 2022 | Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /ruko... |
| CVE-2022-45019 | HIGH | 7.5 | 0.8% | Dec 5, 2022 | SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter. |
| CVE-2022-43706 | MEDIUM | 5.4 | 0.4% | Dec 5, 2022 | Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users wit... |
| CVE-2022-45912 | HIGH | 7.2 | 1.1% | Dec 5, 2022 | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUplo... |
| CVE-2022-43557 | MEDIUM | 5.3 | 0.2% | Dec 5, 2022 | The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, th... |
| CVE-2022-43556 | MEDIUM | 6.1 | 0.6% | Dec 5, 2022 | Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field ... |
| CVE-2022-43553 | HIGH | 8.8 | 1.0% | Dec 5, 2022 | A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with ... |
| CVE-2022-43549 | CRITICAL | 9.8 | 0.7% | Dec 5, 2022 | Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechani... |
| CVE-2022-43548 | HIGH | 8.1 | 14.0% | Dec 5, 2022 | A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insuffic... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now