2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40266 | MEDIUM | 6.5 | 0.8% | Nov 24, 2022 | Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 a... |
| CVE-2022-4136 | CRITICAL | 9.8 | 0.9% | Nov 24, 2022 | Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host ... |
| CVE-2022-44749 | HIGH | 7 | 0.4% | Nov 24, 2022 | A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above c... |
| CVE-2022-44748 | HIGH | 7.5 | 1.3% | Nov 24, 2022 | A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arb... |
| CVE-2022-45873 | MEDIUM | 5.5 | 0.3% | Nov 23, 2022 | systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long back... |
| CVE-2022-45872 | CRITICAL | 9.8 | 0.9% | Nov 23, 2022 | iTerm2 before 3.4.18 mishandles a DECRQSS response. |
| CVE-2022-45868 | HIGH | 7.8 | 0.3% | Nov 23, 2022 | The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminP... |
| CVE-2022-45280 | MEDIUM | 5.4 | 0.3% | Nov 23, 2022 | A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to exec... |
| CVE-2022-45278 | HIGH | 8.8 | 0.7% | Nov 23, 2022 | Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins/Fields/get_fields.html... |
| CVE-2022-45276 | CRITICAL | 9.8 | 0.8% | Nov 23, 2022 | An issue in the /index/user/user_edit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Admi... |
| CVE-2022-44789 | HIGH | 8.8 | 2.2% | Nov 23, 2022 | A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to a... |
| CVE-2022-44120 | CRITICAL | 9.8 | 0.7% | Nov 23, 2022 | dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php. |
| CVE-2022-44118 | CRITICAL | 9.8 | 1.6% | Nov 23, 2022 | dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php. |
| CVE-2022-44117 | CRITICAL | 9.8 | 0.7% | Nov 23, 2022 | Boa 0.94.14rc21 is vulnerable to SQL Injection via username. NOTE: the is disputed by multiple third parties because Boa... |
| CVE-2022-43196 | CRITICAL | 9.1 | 0.7% | Nov 23, 2022 | dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php. |
| CVE-2022-41933 | MEDIUM | 6.5 | 0.4% | Nov 23, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When the `reset... |
| CVE-2022-41932 | MEDIUM | 5.3 | 0.5% | Nov 23, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible t... |
| CVE-2022-45866 | MEDIUM | 5.3 | 1.3% | Nov 23, 2022 | qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allow... |
| CVE-2022-44140 | HIGH | 8.8 | 0.7% | Nov 23, 2022 | Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /Member/memberedit.html component. |
| CVE-2022-41946 | MEDIUM | 5.5 | 0.5% | Nov 23, 2022 | pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStateme... |
| CVE-2022-41935 | MEDIUM | 4.3 | 0.8% | Nov 23, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without t... |
| CVE-2022-41934 | HIGH | 8.8 | 1.3% | Nov 23, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with v... |
| CVE-2022-41931 | HIGH | 8.8 | 1.2% | Nov 23, 2022 | xwiki-platform-icon-ui is vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injec... |
| CVE-2022-41930 | HIGH | 8.2 | 0.8% | Nov 23, 2022 | org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users. Any user (logged ... |
| CVE-2022-41929 | MEDIUM | 4.9 | 0.7% | Nov 23, 2022 | org.xwiki.platform:xwiki-platform-oldcore is missing authorization in User#setDisabledStatus, which may allow an incorre... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now