2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43214 | CRITICAL | 9.8 | 0.9% | Nov 22, 2022 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOr... |
| CVE-2022-41940 | MEDIUM | 6.5 | 1.9% | Nov 22, 2022 | Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Soc... |
| CVE-2022-41937 | HIGH | 8.1 | 0.7% | Nov 22, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The application... |
| CVE-2022-41936 | HIGH | 7.5 | 0.7% | Nov 22, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The `modificati... |
| CVE-2022-41326 | CRITICAL | 9.8 | 1.4% | Nov 22, 2022 | The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbi... |
| CVE-2022-41223 | MEDIUM | 6.8 | 10.6% | Nov 22, 2022 | The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to ... |
| CVE-2022-40842 | CRITICAL | 9.1 | 0.8% | Nov 22, 2022 | ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php. |
| CVE-2022-40765 | MEDIUM | 6.8 | 10.5% | Nov 22, 2022 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authen... |
| CVE-2022-36180 | CRITICAL | 9.6 | 1.0% | Nov 22, 2022 | Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fus... |
| CVE-2022-36179 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Fusiondirectory 1.3 suffers from Improper Session Handling. |
| CVE-2022-30529 | HIGH | 7.2 | 1.0% | Nov 22, 2022 | File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers... |
| CVE-2022-43709 | MEDIUM | 4.9 | 0.6% | Nov 22, 2022 | MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify... |
| CVE-2022-43708 | MEDIUM | 6.1 | 0.4% | Nov 22, 2022 | MyBB 1.8.31 has a (issue 2 of 2) cross-site scripting (XSS) vulnerabilities in the post Attachments interface allow atta... |
| CVE-2022-43707 | MEDIUM | 6.1 | 0.5% | Nov 22, 2022 | MyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attacker... |
| CVE-2022-44788 | MEDIUM | 6.5 | 0.6% | Nov 21, 2022 | An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESS... |
| CVE-2022-44787 | MEDIUM | 6.1 | 0.4% | Nov 21, 2022 | An issue was discovered in Appalti & Contratti 9.12.2. The web applications are vulnerable to a Reflected Cross-Site Scr... |
| CVE-2022-44786 | HIGH | 7.5 | 0.7% | Nov 21, 2022 | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any pag... |
| CVE-2022-44785 | CRITICAL | 9.8 | 0.8% | Nov 21, 2022 | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection... |
| CVE-2022-44784 | HIGH | 8.8 | 1.0% | Nov 21, 2022 | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of service... |
| CVE-2022-41945 | CRITICAL | 9.8 | 0.8% | Nov 21, 2022 | super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spl... |
| CVE-2022-30258 | CRITICAL | 9.8 | 0.7% | Nov 21, 2022 | An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resoluti... |
| CVE-2022-30257 | CRITICAL | 9.8 | 0.7% | Nov 21, 2022 | An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resoluti... |
| CVE-2022-43143 | CRITICAL | 9.6 | 0.8% | Nov 21, 2022 | A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts ... |
| CVE-2022-42096 | MEDIUM | 4.8 | 2.0% | Nov 21, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content... |
| CVE-2022-4105 | MEDIUM | 5.4 | 0.5% | Nov 21, 2022 | A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now