2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20427 | MEDIUM | 6.7 | 0.1% | Nov 17, 2022 | In (TBD) of (TBD), there is a possible way to corrupt memory due to improper input validation. This could lead to local ... |
| CVE-2022-45072 | MEDIUM | 4.3 | 0.3% | Nov 17, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress. |
| CVE-2022-45071 | HIGH | 8.8 | 0.3% | Nov 17, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress. |
| CVE-2022-44725 | HIGH | 7.8 | 0.2% | Nov 17, 2022 | OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. Th... |
| CVE-2022-44001 | CRITICAL | 9.8 | 1.1% | Nov 17, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services ... |
| CVE-2022-43192 | MEDIUM | 6.7 | 0.3% | Nov 17, 2022 | An arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attacke... |
| CVE-2022-42903 | LOW | 3.3 | 0.5% | Nov 17, 2022 | Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list. |
| CVE-2022-3090 | MEDIUM | 5.3 | 0.6% | Nov 17, 2022 | Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versi... |
| CVE-2022-39389 | MEDIUM | 6.5 | 1.0% | Nov 17, 2022 | Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node. All lnd nodes before ve... |
| CVE-2022-38461 | MEDIUM | 4.3 | 0.5% | Nov 17, 2022 | Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a s... |
| CVE-2022-43183 | HIGH | 8.8 | 1.6% | Nov 17, 2022 | XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController... |
| CVE-2022-43179 | HIGH | 7.2 | 0.7% | Nov 17, 2022 | Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?pa... |
| CVE-2022-43163 | HIGH | 7.2 | 0.7% | Nov 17, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43162 | HIGH | 7.2 | 0.7% | Nov 17, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43142 | MEDIUM | 6.1 | 0.4% | Nov 17, 2022 | A cross-site scripting (XSS) vulnerability in the add-fee.php component of Password Storage Application v1.0 allows atta... |
| CVE-2022-44403 | HIGH | 7.2 | 0.7% | Nov 17, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=. |
| CVE-2022-44402 | HIGH | 7.2 | 0.7% | Nov 17, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction. |
| CVE-2022-41920 | HIGH | 8.8 | 0.8% | Nov 17, 2022 | Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue wh... |
| CVE-2022-4053 | MEDIUM | 4.8 | 0.4% | Nov 17, 2022 | A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an... |
| CVE-2022-4052 | HIGH | 7.2 | 0.5% | Nov 17, 2022 | A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some un... |
| CVE-2022-4051 | CRITICAL | 9.8 | 0.6% | Nov 17, 2022 | A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknow... |
| CVE-2022-44384 | HIGH | 8.8 | 5.0% | Nov 17, 2022 | An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP fi... |
| CVE-2022-43140 | HIGH | 7.5 | 1.9% | Nov 17, 2022 | kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.control... |
| CVE-2022-43138 | CRITICAL | 9.8 | 1.2% | Nov 17, 2022 | Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API. |
| CVE-2022-42894 | HIGH | 7.5 | 0.6% | Nov 17, 2022 | A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Reques... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now