2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4208 | MEDIUM | 6.1 | 0.8% | Dec 2, 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'datef' parameter on the '... |
| CVE-2022-44962 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /calendar/viewcale... |
| CVE-2022-44961 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /forums/editforum.... |
| CVE-2022-44960 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /general/search.ph... |
| CVE-2022-44959 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /meetings/listmeet... |
| CVE-2022-44957 | MEDIUM | 5.4 | 1.0% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clients/listclien... |
| CVE-2022-44956 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /projects/listproj... |
| CVE-2022-44955 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the Chat function. This vulnerab... |
| CVE-2022-44954 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /contacts/listcont... |
| CVE-2022-44953 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /linkedcontent/lis... |
| CVE-2022-44952 | MEDIUM | 5.4 | 0.9% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in /index.php?module=conf... |
| CVE-2022-44951 | MEDIUM | 5.4 | 0.9% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Form tab f... |
| CVE-2022-44950 | MEDIUM | 5.4 | 0.9% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field func... |
| CVE-2022-44949 | MEDIUM | 5.4 | 0.9% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field func... |
| CVE-2022-44948 | MEDIUM | 5.4 | 0.9% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Entities Group fea... |
| CVE-2022-44947 | MEDIUM | 5.4 | 1.0% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Highlight Row feat... |
| CVE-2022-44946 | MEDIUM | 5.4 | 1.0% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add Page function ... |
| CVE-2022-44945 | CRITICAL | 9.8 | 0.9% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the heading_field_id parameter. |
| CVE-2022-44944 | MEDIUM | 5.4 | 1.0% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add Announcement f... |
| CVE-2022-44291 | CRITICAL | 9.8 | 3.7% | Dec 2, 2022 | webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php. |
| CVE-2022-44290 | CRITICAL | 9.8 | 3.7% | Dec 2, 2022 | webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php... |
| CVE-2022-3086 | HIGH | 7.6 | 0.3% | Dec 2, 2022 | Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers ... |
| CVE-2022-2642 | HIGH | 7.5 | 0.6% | Dec 2, 2022 | Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out s... |
| CVE-2022-2641 | CRITICAL | 9.8 | 0.5% | Dec 2, 2022 | Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an a... |
| CVE-2022-2640 | HIGH | 7.5 | 0.2% | Dec 2, 2022 | The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulne... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now