2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44844 | CRITICAL | 9.8 | 2.0% | Nov 25, 2022 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass paramete... |
| CVE-2022-44843 | CRITICAL | 9.8 | 2.0% | Nov 25, 2022 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port paramete... |
| CVE-2022-39333 | MEDIUM | 6.1 | 0.9% | Nov 25, 2022 | Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language in... |
| CVE-2022-39332 | MEDIUM | 5.4 | 0.9% | Nov 25, 2022 | Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language in... |
| CVE-2022-39325 | MEDIUM | 6.1 | 0.5% | Nov 25, 2022 | BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scrip... |
| CVE-2022-45152 | CRITICAL | 9.1 | 1.4% | Nov 25, 2022 | A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient valid... |
| CVE-2022-41954 | LOW | 3.3 | 0.2% | Nov 25, 2022 | MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-lik... |
| CVE-2022-41926 | MEDIUM | 5.5 | 0.3% | Nov 25, 2022 | Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the rece... |
| CVE-2022-41158 | CRITICAL | 9.8 | 1.8% | Nov 25, 2022 | Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A... |
| CVE-2022-41157 | CRITICAL | 9.8 | 0.5% | Nov 25, 2022 | A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vul... |
| CVE-2022-41156 | HIGH | 7.8 | 0.2% | Nov 25, 2022 | Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attack... |
| CVE-2022-39346 | MEDIUM | 6.5 | 1.0% | Nov 25, 2022 | Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit u... |
| CVE-2022-39339 | MEDIUM | 4.3 | 0.4% | Nov 25, 2022 | user_oidc is an OpenID Connect user backend for Nextcloud. In versions prior to 1.2.1 sensitive information such as the ... |
| CVE-2022-39338 | MEDIUM | 5.4 | 0.6% | Nov 25, 2022 | user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery u... |
| CVE-2022-39334 | MEDIUM | 4.7 | 0.2% | Nov 25, 2022 | Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless serv... |
| CVE-2022-39331 | MEDIUM | 5.4 | 0.9% | Nov 25, 2022 | Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language in... |
| CVE-2022-45476 | CRITICAL | 9.8 | 1.0% | Nov 25, 2022 | Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returni... |
| CVE-2022-45475 | MEDIUM | 6.5 | 0.8% | Nov 25, 2022 | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. Th... |
| CVE-2022-44860 | HIGH | 7.2 | 0.7% | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-44859 | HIGH | 7.2 | 0.7% | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-44858 | HIGH | 7.2 | 0.8% | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-41958 | HIGH | 7.8 | 0.4% | Nov 25, 2022 | super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config whic... |
| CVE-2022-41712 | MEDIUM | 6.5 | 0.9% | Nov 25, 2022 | Frappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because th... |
| CVE-2022-41706 | HIGH | 8.2 | 0.6% | Nov 25, 2022 | Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus... |
| CVE-2022-41705 | CRITICAL | 9.8 | 1.8% | Nov 25, 2022 | Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now