2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44390 | MEDIUM | 5.4 | 0.3% | Nov 14, 2022 | A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts ... |
| CVE-2022-44389 | MEDIUM | 6.5 | 0.2% | Nov 14, 2022 | EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module.... |
| CVE-2022-44387 | HIGH | 8.8 | 0.3% | Nov 14, 2022 | EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information componen... |
| CVE-2022-43323 | HIGH | 8.8 | 0.4% | Nov 14, 2022 | EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component u... |
| CVE-2022-34320 | HIGH | 7.5 | 0.5% | Nov 14, 2022 | IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sens... |
| CVE-2022-34317 | MEDIUM | 5.4 | 0.5% | Nov 14, 2022 | IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c... |
| CVE-2022-43694 | MEDIUM | 6.1 | 0.6% | Nov 14, 2022 | Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the image m... |
| CVE-2022-43692 | MEDIUM | 6.1 | 0.6% | Nov 14, 2022 | Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS - user can cau... |
| CVE-2022-34316 | MEDIUM | 5.3 | 0.6% | Nov 14, 2022 | IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used b... |
| CVE-2022-34315 | MEDIUM | 5.4 | 0.5% | Nov 14, 2022 | IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c... |
| CVE-2022-34314 | LOW | 3.3 | 0.2% | Nov 14, 2022 | IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ... |
| CVE-2022-3993 | CRITICAL | 9.8 | 1.1% | Nov 14, 2022 | Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3. |
| CVE-2022-38705 | MEDIUM | 6.1 | 0.7% | Nov 14, 2022 | IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a rever... |
| CVE-2022-34329 | MEDIUM | 5.3 | 0.7% | Nov 14, 2022 | IBM CICS TX 11.7 could allow an attacker to obtain sensitive information from HTTP response headers. IBM X-Force ID: 22... |
| CVE-2022-34319 | HIGH | 7.5 | 0.5% | Nov 14, 2022 | IBM CICS TX 11.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensi... |
| CVE-2022-34313 | LOW | 3.1 | 0.6% | Nov 14, 2022 | IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to... |
| CVE-2022-34312 | LOW | 3.3 | 0.2% | Nov 14, 2022 | IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID:... |
| CVE-2022-24938 | HIGH | 7.5 | 0.7% | Nov 14, 2022 | A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immed... |
| CVE-2022-24937 | CRITICAL | 9.8 | 0.7% | Nov 14, 2022 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows ... |
| CVE-2022-0137 | MEDIUM | 5.5 | 0.6% | Nov 14, 2022 | A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffe... |
| CVE-2022-43693 | HIGH | 8.8 | 0.4% | Nov 14, 2022 | Concrete CMS is vulnerable to CSRF due to the lack of "State" parameter for external Concrete authentication service for... |
| CVE-2022-3992 | MEDIUM | 6.1 | 0.5% | Nov 14, 2022 | A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this v... |
| CVE-2022-35719 | MEDIUM | 5.5 | 0.2% | Nov 14, 2022 | IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be ... |
| CVE-2022-0324 | HIGH | 7.5 | 1.1% | Nov 14, 2022 | There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that ... |
| CVE-2022-45136 | CRITICAL | 9.8 | 1.5% | Nov 14, 2022 | Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now