2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43119 | MEDIUM | 6.1 | 0.5% | Nov 9, 2022 | A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts o... |
| CVE-2022-43118 | MEDIUM | 6.1 | 0.4% | Nov 9, 2022 | A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or H... |
| CVE-2022-41978 | MEDIUM | 6.5 | 3.0% | Nov 9, 2022 | Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress. |
| CVE-2022-43292 | HIGH | 7.2 | 0.7% | Nov 9, 2022 | Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp... |
| CVE-2022-43291 | HIGH | 7.2 | 0.7% | Nov 9, 2022 | Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp... |
| CVE-2022-43290 | HIGH | 7.2 | 0.7% | Nov 9, 2022 | Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp... |
| CVE-2022-43321 | MEDIUM | 6.1 | 0.4% | Nov 9, 2022 | Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/... |
| CVE-2022-43320 | MEDIUM | 6.1 | 0.4% | Nov 9, 2022 | FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /... |
| CVE-2022-31253 | HIGH | 7.8 | 0.3% | Nov 9, 2022 | A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap u... |
| CVE-2022-45062 | CRITICAL | 9.8 | 1.4% | Nov 9, 2022 | In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mim... |
| CVE-2022-45061 | HIGH | 7.5 | 2.7% | Nov 9, 2022 | An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing s... |
| CVE-2022-40797 | CRITICAL | 9.8 | 2.6% | Nov 9, 2022 | Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.... |
| CVE-2022-45060 | HIGH | 7.5 | 0.9% | Nov 9, 2022 | An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x bef... |
| CVE-2022-45059 | HIGH | 7.5 | 1.2% | Nov 9, 2022 | An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be perf... |
| CVE-2022-3890 | CRITICAL | 9.6 | 0.7% | Nov 9, 2022 | Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had c... |
| CVE-2022-3889 | HIGH | 8.8 | 0.6% | Nov 9, 2022 | Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2022-3888 | HIGH | 8.8 | 0.6% | Nov 9, 2022 | Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit he... |
| CVE-2022-3887 | HIGH | 8.8 | 0.6% | Nov 9, 2022 | Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit ... |
| CVE-2022-3886 | HIGH | 8.8 | 0.6% | Nov 9, 2022 | Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially e... |
| CVE-2022-3885 | HIGH | 8.8 | 0.7% | Nov 9, 2022 | Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2022-39390 | — | — | — | Nov 9, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-36534. Reason: This candidate is a reservation d... |
| CVE-2022-43144 | MEDIUM | 5.4 | 0.9% | Nov 8, 2022 | A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web s... |
| CVE-2022-39328 | HIGH | 8.1 | 0.9% | Nov 8, 2022 | Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 co... |
| CVE-2022-30515 | MEDIUM | 5.3 | 0.7% | Nov 8, 2022 | ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them ... |
| CVE-2022-41260 | MEDIUM | 6.1 | 0.4% | Nov 8, 2022 | SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauth... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now