2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44187 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri. |
| CVE-2022-44186 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri. |
| CVE-2022-42989 | CRITICAL | 9 | 1.0% | Nov 22, 2022 | ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Caixa... |
| CVE-2022-41445 | MEDIUM | 4.8 | 1.0% | Nov 22, 2022 | A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute... |
| CVE-2022-33012 | HIGH | 8.8 | 1.3% | Nov 22, 2022 | Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack. |
| CVE-2022-42098 | HIGH | 8.8 | 1.2% | Nov 22, 2022 | KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php. |
| CVE-2022-42097 | MEDIUM | 4.8 | 0.8% | Nov 22, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' . |
| CVE-2022-42094 | MEDIUM | 4.8 | 2.5% | Nov 22, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' c... |
| CVE-2022-3910 | HIGH | 7.8 | 1.0% | Nov 22, 2022 | Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_ur... |
| CVE-2022-38462 | MEDIUM | 6.1 | 0.5% | Nov 22, 2022 | Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build... |
| CVE-2022-0222 | HIGH | 7.5 | 0.6% | Nov 22, 2022 | A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet commu... |
| CVE-2022-37301 | HIGH | 7.5 | 0.7% | Nov 22, 2022 | A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the contr... |
| CVE-2022-2513 | MEDIUM | 5.5 | 0.1% | Nov 22, 2022 | A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage fun... |
| CVE-2022-41131 | HIGH | 7.8 | 1.8% | Nov 22, 2022 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airfl... |
| CVE-2022-40954 | MEDIUM | 5.5 | 1.4% | Nov 22, 2022 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airfl... |
| CVE-2022-40189 | CRITICAL | 9.8 | 3.9% | Nov 22, 2022 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airfl... |
| CVE-2022-38649 | CRITICAL | 9.8 | 3.2% | Nov 22, 2022 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airfl... |
| CVE-2022-45363 | MEDIUM | 5.4 | 0.4% | Nov 22, 2022 | Auth. (subscriber+) Stored Cross-Site Scripting (XSS) in Muffingroup Betheme theme <= 26.6.1 on WordPress. |
| CVE-2022-37931 | HIGH | 7.8 | 0.2% | Nov 22, 2022 | A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround... |
| CVE-2022-4111 | MEDIUM | 6.5 | 0.8% | Nov 22, 2022 | Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile... |
| CVE-2022-40602 | CRITICAL | 9.8 | 1.0% | Nov 22, 2022 | A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the ... |
| CVE-2022-36227 | CRITICAL | 9.8 | 2.4% | Nov 22, 2022 | In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with ... |
| CVE-2022-35407 | HIGH | 7.8 | 0.2% | Nov 22, 2022 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code... |
| CVE-2022-43685 | HIGH | 8.8 | 0.7% | Nov 22, 2022 | CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request.... |
| CVE-2022-43215 | CRITICAL | 9.8 | 0.9% | Nov 22, 2022 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrde... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now