2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44262 | CRITICAL | 9.8 | 1.5% | Dec 1, 2022 | ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE). |
| CVE-2022-40849 | MEDIUM | 5.4 | 0.4% | Dec 1, 2022 | ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vul... |
| CVE-2022-40489 | HIGH | 8.8 | 0.3% | Dec 1, 2022 | ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrato... |
| CVE-2022-40204 | MEDIUM | 5.4 | 0.3% | Dec 1, 2022 | A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via t... |
| CVE-2022-46162 | CRITICAL | 9.8 | 1.1% | Nov 30, 2022 | discourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rend... |
| CVE-2022-46156 | LOW | 3.3 | 0.5% | Nov 30, 2022 | The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes ... |
| CVE-2022-23746 | HIGH | 7.5 | 0.6% | Nov 30, 2022 | The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the por... |
| CVE-2022-44296 | HIGH | 7.2 | 0.7% | Nov 30, 2022 | Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=. |
| CVE-2022-44295 | HIGH | 7.2 | 0.7% | Nov 30, 2022 | Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=. |
| CVE-2022-44294 | HIGH | 7.2 | 0.7% | Nov 30, 2022 | Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=. |
| CVE-2022-4234 | MEDIUM | 6.1 | 0.4% | Nov 30, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been rated as problematic. This issue affe... |
| CVE-2022-46149 | MEDIUM | 5.4 | 0.9% | Nov 30, 2022 | Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.... |
| CVE-2022-44151 | CRITICAL | 9.8 | 0.9% | Nov 30, 2022 | Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php. |
| CVE-2022-44136 | CRITICAL | 9.8 | 1.1% | Nov 30, 2022 | Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE). |
| CVE-2022-1911 | MEDIUM | 5.3 | 0.6% | Nov 30, 2022 | Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated ... |
| CVE-2022-1606 | MEDIUM | 4.3 | 0.5% | Nov 30, 2022 | Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to rea... |
| CVE-2022-38803 | MEDIUM | 6.8 | 0.6% | Nov 30, 2022 | Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An ... |
| CVE-2022-38802 | MEDIUM | 6.2 | 0.6% | Nov 30, 2022 | Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual ... |
| CVE-2022-38801 | MEDIUM | 5.4 | 0.3% | Nov 30, 2022 | In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cr... |
| CVE-2022-45842 | LOW | 3.7 | 0.3% | Nov 30, 2022 | Unauth. Race Condition vulnerability in WP ULike Plugin <= 4.6.4 on WordPress allows attackers to increase/decrease rati... |
| CVE-2022-26366 | HIGH | 8.8 | 0.3% | Nov 30, 2022 | Cross-Site Request Forgery (CSRF) in AdRotate Banner Manager Plugin <= 5.9 on WordPress. |
| CVE-2022-24441 | HIGH | 8.8 | 0.7% | Nov 30, 2022 | The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince... |
| CVE-2022-22984 | MEDIUM | 6.3 | 3.0% | Nov 30, 2022 | The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.... |
| CVE-2022-4233 | MEDIUM | 6.1 | 0.3% | Nov 30, 2022 | A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected b... |
| CVE-2022-4232 | CRITICAL | 9.8 | 0.4% | Nov 30, 2022 | A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected i... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now