2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44002 | MEDIUM | 6.1 | 0.4% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient output encoding of user-supplied data, the... |
| CVE-2022-44000 | CRITICAL | 9.8 | 0.9% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to an exposed internal communications interface, it is pos... |
| CVE-2022-40752 | CRITICAL | 9.8 | 1.8% | Nov 16, 2022 | IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of speci... |
| CVE-2022-44008 | MEDIUM | 6.5 | 0.8% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary local files can be retri... |
| CVE-2022-44007 | HIGH | 8.8 | 0.8% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is pos... |
| CVE-2022-43999 | CRITICAL | 9.8 | 0.9% | Nov 16, 2022 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to exposed CORBA management services, arbitrary system com... |
| CVE-2022-39319 | MEDIUM | 4.6 | 0.7% | Nov 16, 2022 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length val... |
| CVE-2022-39318 | MEDIUM | 5.7 | 1.0% | Nov 16, 2022 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation... |
| CVE-2022-39317 | MEDIUM | 4.6 | 0.6% | Nov 16, 2022 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check fo... |
| CVE-2022-43135 | CRITICAL | 9.8 | 0.8% | Nov 16, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username pa... |
| CVE-2022-41914 | LOW | 3.7 | 0.5% | Nov 16, 2022 | Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity Management(SCIM... |
| CVE-2022-41877 | MEDIUM | 4.6 | 0.7% | Nov 16, 2022 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length val... |
| CVE-2022-39383 | MEDIUM | 6.5 | 0.4% | Nov 16, 2022 | KubeVela is an open source application delivery platform. Users using the VelaUX APIServer could be affected by this vul... |
| CVE-2022-39347 | MEDIUM | 5.7 | 0.9% | Nov 16, 2022 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicaliz... |
| CVE-2022-39320 | MEDIUM | 4.6 | 0.7% | Nov 16, 2022 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition... |
| CVE-2022-39316 | MEDIUM | 5.7 | 1.0% | Nov 16, 2022 | FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGF... |
| CVE-2022-34354 | LOW | 3.3 | 0.2% | Nov 16, 2022 | IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be r... |
| CVE-2022-44073 | MEDIUM | 5.4 | 0.4% | Nov 16, 2022 | Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts. |
| CVE-2022-44071 | MEDIUM | 5.4 | 0.4% | Nov 16, 2022 | Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile. |
| CVE-2022-44070 | MEDIUM | 5.4 | 0.4% | Nov 16, 2022 | Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles. |
| CVE-2022-44069 | MEDIUM | 5.4 | 0.4% | Nov 16, 2022 | Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module. |
| CVE-2022-43264 | HIGH | 7.5 | 0.9% | Nov 16, 2022 | Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download ... |
| CVE-2022-43263 | MEDIUM | 6.1 | 0.5% | Nov 16, 2022 | A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attacker... |
| CVE-2022-43262 | CRITICAL | 9.8 | 0.8% | Nov 16, 2022 | Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter... |
| CVE-2022-43256 | CRITICAL | 9.8 | 0.9% | Nov 16, 2022 | SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/i... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now