2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36433 | MEDIUM | 6.1 | 0.6% | Nov 29, 2022 | The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript c... |
| CVE-2022-4202 | HIGH | 8.8 | 0.8% | Nov 29, 2022 | A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is th... |
| CVE-2022-45329 | HIGH | 7.5 | 0.8% | Nov 29, 2022 | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allo... |
| CVE-2022-43326 | HIGH | 7.5 | 0.7% | Nov 29, 2022 | An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node... |
| CVE-2022-41568 | HIGH | 7.5 | 0.6% | Nov 29, 2022 | LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat. |
| CVE-2022-40799 | HIGH | 8.8 | 31.3% | Nov 29, 2022 | Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS l... |
| CVE-2022-45204 | MEDIUM | 5.5 | 0.3% | Nov 29, 2022 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedi... |
| CVE-2022-45202 | HIGH | 7.8 | 0.3% | Nov 29, 2022 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isom... |
| CVE-2022-44038 | CRITICAL | 9.8 | 1.6% | Nov 29, 2022 | Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunn... |
| CVE-2022-44037 | HIGH | 8.8 | 0.6% | Nov 29, 2022 | An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V... |
| CVE-2022-42109 | CRITICAL | 9.8 | 1.1% | Nov 29, 2022 | Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shop... |
| CVE-2022-42100 | MEDIUM | 5.4 | 0.5% | Nov 29, 2022 | KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply... |
| CVE-2022-42099 | MEDIUM | 5.4 | 0.5% | Nov 29, 2022 | KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subje... |
| CVE-2022-41676 | MEDIUM | 5.4 | 0.4% | Nov 29, 2022 | Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general us... |
| CVE-2022-41675 | HIGH | 8 | 0.9% | Nov 29, 2022 | A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server ... |
| CVE-2022-36137 | MEDIUM | 4.8 | 0.5% | Nov 29, 2022 | ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader. |
| CVE-2022-36136 | MEDIUM | 4.8 | 0.5% | Nov 29, 2022 | ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment. |
| CVE-2022-32967 | LOW | 2.1 | 0.2% | Nov 29, 2022 | RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-c... |
| CVE-2022-32966 | MEDIUM | 6.5 | 0.3% | Nov 29, 2022 | RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent ... |
| CVE-2022-45307 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write... |
| CVE-2022-45306 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticate... |
| CVE-2022-45305 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group w... |
| CVE-2022-45304 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group wri... |
| CVE-2022-45301 | MEDIUM | 4.3 | 0.4% | Nov 29, 2022 | Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group wri... |
| CVE-2022-4129 | MEDIUM | 5.5 | 0.2% | Nov 28, 2022 | A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now