2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43234 | CRITICAL | 9.8 | 0.9% | Nov 16, 2022 | An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary... |
| CVE-2022-4022 | MEDIUM | 5.4 | 0.4% | Nov 16, 2022 | The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malici... |
| CVE-2022-4021 | MEDIUM | 4.3 | 0.4% | Nov 16, 2022 | The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu... |
| CVE-2022-4018 | MEDIUM | 4.3 | 0.8% | Nov 16, 2022 | Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. |
| CVE-2022-3980 | CRITICAL | 9.8 | 8.1% | Nov 16, 2022 | An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sop... |
| CVE-2022-24036 | HIGH | 8.6 | 0.5% | Nov 16, 2022 | Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated a... |
| CVE-2022-45047 | CRITICAL | 9.8 | 3.6% | Nov 16, 2022 | Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deseriali... |
| CVE-2022-4015 | CRITICAL | 9.8 | 0.5% | Nov 16, 2022 | A vulnerability, which was classified as critical, was found in Sports Club Management System 119. This affects an unkno... |
| CVE-2022-4014 | MEDIUM | 4.3 | 0.2% | Nov 16, 2022 | A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown... |
| CVE-2022-4013 | HIGH | 8.8 | 0.2% | Nov 16, 2022 | A vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an ... |
| CVE-2022-4012 | CRITICAL | 9.8 | 0.5% | Nov 16, 2022 | A vulnerability classified as critical has been found in Hospital Management Center. Affected is an unknown function of ... |
| CVE-2022-4011 | CRITICAL | 9.8 | 1.0% | Nov 16, 2022 | A vulnerability was found in Simple History Plugin. It has been rated as critical. This issue affects some unknown proce... |
| CVE-2022-2166 | CRITICAL | 9.8 | 1.0% | Nov 16, 2022 | Improper Restriction of Excessive Authentication Attempts in GitHub repository mastodon/mastodon prior to 4.0.0. |
| CVE-2022-41917 | MEDIUM | 4.3 | 0.5% | Nov 16, 2022 | OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. OpenSearch allows users to specify a loc... |
| CVE-2022-3920 | HIGH | 7.5 | 0.7% | Nov 16, 2022 | HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services... |
| CVE-2022-41918 | MEDIUM | 6.3 | 0.4% | Nov 15, 2022 | OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementatio... |
| CVE-2022-41916 | HIGH | 7.5 | 0.9% | Nov 15, 2022 | Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of ser... |
| CVE-2022-4006 | HIGH | 7.5 | 0.8% | Nov 15, 2022 | A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function... |
| CVE-2022-30769 | MEDIUM | 4.6 | 0.5% | Nov 15, 2022 | Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in u... |
| CVE-2022-30768 | MEDIUM | 5.4 | 0.6% | Nov 15, 2022 | A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code vi... |
| CVE-2022-29279 | HIGH | 8.2 | 0.2% | Nov 15, 2022 | Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted ... |
| CVE-2022-29278 | HIGH | 8.2 | 0.2% | Nov 15, 2022 | Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer ... |
| CVE-2022-29277 | HIGH | 8.8 | 0.2% | Nov 15, 2022 | Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of ... |
| CVE-2022-29276 | HIGH | 8.2 | 0.2% | Nov 15, 2022 | SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe use untrust... |
| CVE-2022-43279 | HIGH | 7.2 | 0.9% | Nov 15, 2022 | LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/th... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now