2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3945 | MEDIUM | 5.3 | 0.9% | Nov 11, 2022 | Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3. |
| CVE-2022-3944 | HIGH | 8.8 | 0.5% | Nov 11, 2022 | A vulnerability was found in jerryhanjj ERP. It has been declared as critical. Affected by this vulnerability is the fun... |
| CVE-2022-3943 | MEDIUM | 5.4 | 0.3% | Nov 11, 2022 | A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the fil... |
| CVE-2022-3942 | MEDIUM | 6.1 | 0.7% | Nov 11, 2022 | A vulnerability was found in SourceCodester Sanitization Management System and classified as problematic. This issue aff... |
| CVE-2022-3941 | MEDIUM | 5.3 | 0.7% | Nov 11, 2022 | A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown cod... |
| CVE-2022-3940 | CRITICAL | 9.8 | 0.6% | Nov 11, 2022 | A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the f... |
| CVE-2022-3939 | CRITICAL | 9.8 | 0.6% | Nov 11, 2022 | A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unkn... |
| CVE-2022-41892 | CRITICAL | 9.8 | 0.5% | Nov 11, 2022 | Arches is a web platform for creating, managing, & visualizing geospatial data. Versions prior to 6.1.2, 6.2.1, and 7.1.... |
| CVE-2022-41873 | MEDIUM | 5.4 | 0.2% | Nov 11, 2022 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are... |
| CVE-2022-36938 | CRITICAL | 9.8 | 1.2% | Nov 11, 2022 | DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loadin... |
| CVE-2022-41878 | CRITICAL | 9.8 | 0.9% | Nov 10, 2022 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prio... |
| CVE-2022-42460 | MEDIUM | 5.4 | 0.4% | Nov 10, 2022 | Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on W... |
| CVE-2022-41607 | HIGH | 7.5 | 1.0% | Nov 10, 2022 | All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (API) is vu... |
| CVE-2022-40981 | CRITICAL | 10 | 0.5% | Nov 10, 2022 | All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload. An attac... |
| CVE-2022-40225 | HIGH | 7.5 | 0.6% | Nov 10, 2022 | A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6... |
| CVE-2022-3703 | CRITICAL | 10 | 0.3% | Nov 10, 2022 | All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting maliciou... |
| CVE-2022-28748 | — | — | — | Nov 10, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2964. Reason: This candidate is a reservation du... |
| CVE-2022-43679 | MEDIUM | 5.3 | 0.3% | Nov 10, 2022 | The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config us... |
| CVE-2022-41879 | CRITICAL | 9.8 | 0.8% | Nov 10, 2022 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prio... |
| CVE-2022-41876 | MEDIUM | 5.3 | 1.3% | Nov 10, 2022 | ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and ... |
| CVE-2022-41874 | MEDIUM | 4.7 | 0.4% | Nov 10, 2022 | Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri ... |
| CVE-2022-35740 | MEDIUM | 6.1 | 1.2% | Nov 10, 2022 | dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using ... |
| CVE-2022-26088 | MEDIUM | 5.4 | 1.0% | Nov 10, 2022 | An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to ... |
| CVE-2022-43074 | CRITICAL | 9.8 | 0.9% | Nov 10, 2022 | AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.p... |
| CVE-2022-41719 | HIGH | 7.5 | 1.0% | Nov 10, 2022 | Unmarshal can panic on some inputs, possibly allowing for denial of service attacks. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now