2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38075 | MEDIUM | 6.1 | 0.2% | Nov 18, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Mantenimiento web plugin... |
| CVE-2022-45474 | CRITICAL | 9.8 | 0.9% | Nov 18, 2022 | drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request. |
| CVE-2022-45473 | MEDIUM | 5.5 | 0.3% | Nov 18, 2022 | In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666. |
| CVE-2022-44379 | HIGH | 7.2 | 0.8% | Nov 18, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service. |
| CVE-2022-44378 | HIGH | 7.2 | 1.0% | Nov 18, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic. |
| CVE-2022-44204 | CRITICAL | 9.8 | 1.2% | Nov 18, 2022 | D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow. |
| CVE-2022-45471 | HIGH | 7.5 | 0.5% | Nov 18, 2022 | In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email address |
| CVE-2022-24038 | MEDIUM | 6.5 | 0.6% | Nov 18, 2022 | Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated ... |
| CVE-2022-24037 | HIGH | 8.2 | 0.7% | Nov 18, 2022 | Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated... |
| CVE-2022-43308 | HIGH | 7.8 | 0.3% | Nov 18, 2022 | INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via c... |
| CVE-2022-24939 | MEDIUM | 6.5 | 0.3% | Nov 18, 2022 | A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This ca... |
| CVE-2022-45375 | MEDIUM | 5.4 | 0.4% | Nov 17, 2022 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in iFeature Slider plugin <= 1.2 on WordPress. |
| CVE-2022-45077 | HIGH | 8.8 | 0.6% | Nov 17, 2022 | Auth. (subscriber+) PHP Object Injection vulnerability in Betheme theme <= 26.5.1.4 on WordPress. |
| CVE-2022-45069 | HIGH | 8.8 | 0.7% | Nov 17, 2022 | Auth. (contributor+) Privilege Escalation vulnerability in Crowdsignal Dashboard plugin <= 3.0.9 on WordPress. |
| CVE-2022-45066 | HIGH | 8.8 | 0.6% | Nov 17, 2022 | Auth. (subscriber+) Broken Access Control vulnerability in WooSwipe WooCommerce Gallery plugin <= 2.0.1 on WordPress. |
| CVE-2022-44736 | MEDIUM | 4.8 | 0.4% | Nov 17, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Chameleon plugin <= 1.4.3 on WordPress. |
| CVE-2022-44591 | MEDIUM | 4.8 | 0.4% | Nov 17, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anthologize plugin <= 0.8.0 on WordPress. |
| CVE-2022-44577 | — | — | — | Nov 17, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-43506 | HIGH | 8.8 | 0.7% | Nov 17, 2022 | SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an atta... |
| CVE-2022-43457 | HIGH | 8.8 | 0.6% | Nov 17, 2022 | SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows a... |
| CVE-2022-43452 | HIGH | 8.8 | 7.7% | Nov 17, 2022 | SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows ... |
| CVE-2022-43447 | HIGH | 8.8 | 0.6% | Nov 17, 2022 | SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an... |
| CVE-2022-43332 | MEDIUM | 6.1 | 0.6% | Nov 17, 2022 | A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML... |
| CVE-2022-43171 | MEDIUM | 6.5 | 0.7% | Nov 17, 2022 | A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows att... |
| CVE-2022-43096 | MEDIUM | 6.8 | 0.5% | Nov 17, 2022 | Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now