2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42122 | CRITICAL | 9.8 | 0.8% | Nov 15, 2022 | A SQL injection vulnerability in the Friendly Url module in Liferay Portal 7.3.7, and Liferay DXP 7.3 fix pack 2 through... |
| CVE-2022-42121 | HIGH | 8.8 | 1.1% | Nov 15, 2022 | A SQL injection vulnerability in the Layout module in Liferay Portal 7.1.3 through 7.4.3.4, and Liferay DXP 7.1 before f... |
| CVE-2022-42120 | CRITICAL | 9.8 | 0.8% | Nov 15, 2022 | A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 befor... |
| CVE-2022-42119 | MEDIUM | 5.4 | 0.5% | Nov 15, 2022 | Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Port... |
| CVE-2022-42118 | MEDIUM | 6.1 | 1.1% | Nov 15, 2022 | A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Lifera... |
| CVE-2022-42111 | MEDIUM | 5.4 | 0.5% | Nov 15, 2022 | A Cross-site scripting (XSS) vulnerability in the Sharing module's user notification in Liferay Portal 7.2.1 through 7.4... |
| CVE-2022-42984 | CRITICAL | 9.8 | 0.7% | Nov 15, 2022 | WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter ... |
| CVE-2022-42110 | MEDIUM | 6.1 | 0.6% | Nov 15, 2022 | A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Lifera... |
| CVE-2022-40405 | HIGH | 7.5 | 0.6% | Nov 15, 2022 | WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter... |
| CVE-2022-35613 | HIGH | 8.8 | 0.3% | Nov 15, 2022 | Konker v2.3.9 was to discovered to contain a Cross-Site Request Forgery (CSRF). |
| CVE-2022-33986 | MEDIUM | 6.4 | 0.1% | Nov 15, 2022 | DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could lead to a TOCTOU attack. D... |
| CVE-2022-33985 | HIGH | 7 | 0.1% | Nov 15, 2022 | DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM c... |
| CVE-2022-33984 | HIGH | 7 | 0.2% | Nov 15, 2022 | DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM cor... |
| CVE-2022-33983 | HIGH | 7 | 0.2% | Nov 15, 2022 | DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRA... |
| CVE-2022-33909 | HIGH | 7 | 0.1% | Nov 15, 2022 | DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM cor... |
| CVE-2022-33908 | HIGH | 7 | 0.1% | Nov 15, 2022 | DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM co... |
| CVE-2022-33906 | MEDIUM | 6.4 | 0.2% | Nov 15, 2022 | DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMR... |
| CVE-2022-33905 | HIGH | 7 | 0.1% | Nov 15, 2022 | DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corr... |
| CVE-2022-32267 | MEDIUM | 6.4 | 0.1% | Nov 15, 2022 | DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM c... |
| CVE-2022-31243 | MEDIUM | 6.4 | 0.2% | Nov 15, 2022 | Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used... |
| CVE-2022-30774 | MEDIUM | 6.4 | 0.2% | Nov 15, 2022 | DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been... |
| CVE-2022-43695 | MEDIUM | 4.8 | 0.6% | Nov 14, 2022 | Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting ... |
| CVE-2022-43691 | MEDIUM | 5.3 | 0.4% | Nov 14, 2022 | Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 inadvertently disclose server-side sensitive ... |
| CVE-2022-43690 | MEDIUM | 6.3 | 0.6% | Nov 14, 2022 | Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 did not use strict comparison for the legacy_... |
| CVE-2022-43689 | MEDIUM | 5.3 | 0.6% | Nov 14, 2022 | Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leadi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now