2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39394 | CRITICAL | 9.8 | 0.3% | Nov 10, 2022 | Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementat... |
| CVE-2022-39393 | HIGH | 8.6 | 0.7% | Nov 10, 2022 | Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implem... |
| CVE-2022-39392 | HIGH | 7.4 | 0.6% | Nov 10, 2022 | Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of... |
| CVE-2022-39388 | LOW | 3.5 | 0.5% | Nov 10, 2022 | Istio is an open platform to connect, manage, and secure microservices. In versions on the 1.15.x branch prior to 1.15.3... |
| CVE-2022-39395 | CRITICAL | 9.9 | 1.1% | Nov 10, 2022 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela Server an... |
| CVE-2022-36022 | MEDIUM | 5.3 | 0.4% | Nov 10, 2022 | Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearn... |
| CVE-2022-44727 | CRITICAL | 9.1 | 2.4% | Nov 10, 2022 | The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcooki... |
| CVE-2022-45063 | CRITICAL | 9.8 | 4.9% | Nov 10, 2022 | xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead... |
| CVE-2022-34666 | MEDIUM | 5.5 | 0.2% | Nov 10, 2022 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user wi... |
| CVE-2022-44089 | CRITICAL | 9.8 | 1.6% | Nov 10, 2022 | ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE. |
| CVE-2022-44088 | CRITICAL | 9.8 | 21.6% | Nov 10, 2022 | ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRI... |
| CVE-2022-44087 | CRITICAL | 9.8 | 1.6% | Nov 10, 2022 | ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZOO... |
| CVE-2022-43754 | MEDIUM | 5.4 | 0.4% | Nov 10, 2022 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni... |
| CVE-2022-43753 | MEDIUM | 4.3 | 0.7% | Nov 10, 2022 | A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUS... |
| CVE-2022-39038 | HIGH | 8.8 | 0.9% | Nov 10, 2022 | Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege ca... |
| CVE-2022-39037 | HIGH | 7.5 | 1.2% | Nov 10, 2022 | Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit ... |
| CVE-2022-39036 | CRITICAL | 9.8 | 1.2% | Nov 10, 2022 | The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated ... |
| CVE-2022-38122 | HIGH | 7.5 | 0.5% | Nov 10, 2022 | UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this... |
| CVE-2022-38121 | MEDIUM | 6.5 | 3.4% | Nov 10, 2022 | UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with gene... |
| CVE-2022-38120 | MEDIUM | 6.5 | 5.6% | Nov 10, 2022 | UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerab... |
| CVE-2022-38119 | CRITICAL | 9.8 | 1.0% | Nov 10, 2022 | UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerabi... |
| CVE-2022-31255 | MEDIUM | 4.3 | 0.7% | Nov 10, 2022 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SU... |
| CVE-2022-42787 | HIGH | 8.8 | 0.7% | Nov 10, 2022 | Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an us... |
| CVE-2022-42786 | MEDIUM | 5.4 | 0.4% | Nov 10, 2022 | Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute a... |
| CVE-2022-45130 | MEDIUM | 6.5 | 0.3% | Nov 10, 2022 | Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password. NOTE: Obsi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now