2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0698 | MEDIUM | 6.1 | 0.7% | Nov 25, 2022 | Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' p... |
| CVE-2022-45218 | MEDIUM | 6.1 | 0.4% | Nov 25, 2022 | Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability. This vulne... |
| CVE-2022-45210 | MEDIUM | 4.3 | 0.5% | Nov 25, 2022 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin. |
| CVE-2022-45208 | MEDIUM | 4.3 | 0.5% | Nov 25, 2022 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin. |
| CVE-2022-45207 | CRITICAL | 9.8 | 0.9% | Nov 25, 2022 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString. |
| CVE-2022-45206 | CRITICAL | 9.8 | 0.8% | Nov 25, 2022 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check. |
| CVE-2022-45205 | MEDIUM | 5.3 | 0.6% | Nov 25, 2022 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. |
| CVE-2022-43984 | HIGH | 8.2 | 0.6% | Nov 25, 2022 | Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus... |
| CVE-2022-43983 | HIGH | 8.2 | 0.6% | Nov 25, 2022 | Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus... |
| CVE-2022-38813 | HIGH | 8.1 | 1.5% | Nov 25, 2022 | PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows atta... |
| CVE-2022-37721 | CRITICAL | 9 | 0.7% | Nov 25, 2022 | PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting (XSS_ when a low privileged user such as an author, injects a... |
| CVE-2022-23044 | HIGH | 8.8 | 0.4% | Nov 25, 2022 | Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended action... |
| CVE-2022-45040 | MEDIUM | 5.4 | 0.4% | Nov 25, 2022 | A cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4 allows attackers to exec... |
| CVE-2022-45039 | HIGH | 7.2 | 1.0% | Nov 25, 2022 | An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbi... |
| CVE-2022-45038 | MEDIUM | 5.4 | 1.0% | Nov 25, 2022 | A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute ar... |
| CVE-2022-45037 | MEDIUM | 5.4 | 1.0% | Nov 25, 2022 | A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbi... |
| CVE-2022-45036 | MEDIUM | 5.4 | 0.5% | Nov 25, 2022 | A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute ... |
| CVE-2022-44411 | HIGH | 7.5 | 0.4% | Nov 25, 2022 | Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers t... |
| CVE-2022-38377 | LOW | 2.7 | 0.5% | Nov 25, 2022 | An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.... |
| CVE-2022-37720 | CRITICAL | 9 | 1.0% | Nov 25, 2022 | Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS). When a low privileged user such as an aut... |
| CVE-2022-38767 | HIGH | 7.5 | 1.0% | Nov 25, 2022 | An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius serv... |
| CVE-2022-38166 | HIGH | 7.5 | 0.7% | Nov 25, 2022 | In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dl... |
| CVE-2022-4141 | HIGH | 7.8 | 0.4% | Nov 25, 2022 | Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in ... |
| CVE-2022-4091 | MEDIUM | 6.1 | 0.4% | Nov 25, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affec... |
| CVE-2022-36133 | CRITICAL | 9.1 | 0.7% | Nov 25, 2022 | The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now