2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42893 | HIGH | 7.5 | 0.5% | Nov 17, 2022 | A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos... |
| CVE-2022-42892 | MEDIUM | 5.3 | 0.6% | Nov 17, 2022 | A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos... |
| CVE-2022-42891 | HIGH | 7.5 | 0.5% | Nov 17, 2022 | A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos... |
| CVE-2022-42734 | HIGH | 7.5 | 0.5% | Nov 17, 2022 | A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos... |
| CVE-2022-42733 | HIGH | 7.5 | 0.6% | Nov 17, 2022 | A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos... |
| CVE-2022-42732 | HIGH | 7.5 | 0.6% | Nov 17, 2022 | A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos... |
| CVE-2022-40751 | MEDIUM | 4.9 | 0.6% | Nov 17, 2022 | IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 thr... |
| CVE-2022-38390 | MEDIUM | 5.4 | 0.4% | Nov 17, 2022 | Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows use... |
| CVE-2022-45461 | HIGH | 8.8 | 0.8% | Nov 17, 2022 | The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authentic... |
| CVE-2022-42985 | MEDIUM | 4.8 | 0.4% | Nov 17, 2022 | The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users w... |
| CVE-2022-42982 | HIGH | 7.5 | 0.7% | Nov 17, 2022 | BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP ... |
| CVE-2022-42954 | MEDIUM | 5.4 | 0.3% | Nov 17, 2022 | Keyfactor EJBCA before 7.10.0 allows XSS. |
| CVE-2022-39834 | MEDIUM | 5.4 | 0.3% | Nov 17, 2022 | A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-priv... |
| CVE-2022-36432 | MEDIUM | 5.4 | 0.5% | Nov 17, 2022 | The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers t... |
| CVE-2022-42246 | HIGH | 8.8 | 0.3% | Nov 17, 2022 | Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account. |
| CVE-2022-42245 | CRITICAL | 9.8 | 0.8% | Nov 17, 2022 | Dreamer CMS 4.0.01 is vulnerable to SQL Injection. |
| CVE-2022-42187 | MEDIUM | 6.1 | 0.4% | Nov 17, 2022 | Hustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php. |
| CVE-2022-40881 | CRITICAL | 9.8 | 29.5% | Nov 17, 2022 | SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php |
| CVE-2022-43782 | CRITICAL | 9.8 | 0.9% | Nov 17, 2022 | Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfigur... |
| CVE-2022-43781 | CRITICAL | 9.8 | 98.0% | Nov 17, 2022 | There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker ... |
| CVE-2022-42960 | MEDIUM | 5.4 | 0.4% | Nov 17, 2022 | EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DO... |
| CVE-2022-44006 | CRITICAL | 9.8 | 1.9% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames... |
| CVE-2022-44005 | MEDIUM | 5.3 | 0.6% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in verification links, the n... |
| CVE-2022-44004 | CRITICAL | 9.8 | 1.2% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthentica... |
| CVE-2022-44003 | CRITICAL | 9.8 | 1.5% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the appli... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now