2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44544 | CRITICAL | 9.8 | 0.8% | Nov 6, 2022 | Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PD... |
| CVE-2022-42707 | HIGH | 7.5 | 0.6% | Nov 6, 2022 | In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0, embedded images ar... |
| CVE-2022-3869 | MEDIUM | 6.1 | 1.3% | Nov 5, 2022 | Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2. |
| CVE-2022-3868 | CRITICAL | 9.8 | 0.5% | Nov 5, 2022 | A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an u... |
| CVE-2022-43572 | MEDIUM | 6.5 | 0.8% | Nov 4, 2022 | In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk (S2S... |
| CVE-2022-43570 | MEDIUM | 6.5 | 0.7% | Nov 4, 2022 | In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup lan... |
| CVE-2022-43569 | MEDIUM | 5.4 | 0.7% | Nov 4, 2022 | In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can inject and store arbitrary scrip... |
| CVE-2022-43568 | MEDIUM | 6.1 | 42.8% | Nov 4, 2022 | In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via Jav... |
| CVE-2022-43567 | HIGH | 8.8 | 1.2% | Nov 4, 2022 | In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system c... |
| CVE-2022-43566 | HIGH | 8 | 0.8% | Nov 4, 2022 | In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more ... |
| CVE-2022-43565 | HIGH | 8.8 | 0.6% | Nov 4, 2022 | In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notatio... |
| CVE-2022-43564 | MEDIUM | 6.5 | 0.8% | Nov 4, 2022 | In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who can create search macros and schedule se... |
| CVE-2022-43563 | HIGH | 8.8 | 0.6% | Nov 4, 2022 | In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an at... |
| CVE-2022-43562 | MEDIUM | 5.4 | 0.4% | Nov 4, 2022 | In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape th... |
| CVE-2022-39384 | MEDIUM | 5.6 | 0.5% | Nov 4, 2022 | OpenZeppelin Contracts is a library for secure smart contract development. Before version 4.4.1 but after 3.2.0, initial... |
| CVE-2022-38654 | MEDIUM | 5.5 | 0.2% | Nov 4, 2022 | HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server... |
| CVE-2022-39344 | CRITICAL | 9.8 | 1.9% | Nov 4, 2022 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS Thre... |
| CVE-2022-38660 | HIGH | 8.8 | 0.3% | Nov 4, 2022 | HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attack... |
| CVE-2022-43945 | HIGH | 7.5 | 22.4% | Nov 4, 2022 | The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks ... |
| CVE-2022-40263 | HIGH | 7.8 | 0.2% | Nov 4, 2022 | BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be ... |
| CVE-2022-39387 | HIGH | 7.5 | 0.9% | Nov 4, 2022 | XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Prior to version 1.29.1, even if a wiki has... |
| CVE-2022-31691 | CRITICAL | 9.8 | 2.4% | Nov 4, 2022 | Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI... |
| CVE-2022-27894 | MEDIUM | 5.4 | 0.3% | Nov 4, 2022 | The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an att... |
| CVE-2022-20969 | MEDIUM | 5.4 | 0.4% | Nov 4, 2022 | A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote attacker t... |
| CVE-2022-20963 | MEDIUM | 5.4 | 0.4% | Nov 4, 2022 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now