2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43561 | MEDIUM | 4.8 | 0.6% | Nov 3, 2022 | In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role can store... |
| CVE-2022-38168 | CRITICAL | 9.1 | 1.1% | Nov 3, 2022 | Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows remote un... |
| CVE-2022-44628 | MEDIUM | 4.8 | 0.4% | Nov 3, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JumpDEMAND Inc. 4ECPS Web Forms plugin <= 0.2.17 on Wo... |
| CVE-2022-44627 | MEDIUM | 5.4 | 0.2% | Nov 3, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 1.8.12 on WordPress allows attackers ... |
| CVE-2022-43574 | HIGH | 7.5 | 0.5% | Nov 3, 2022 | "IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignm... |
| CVE-2022-43495 | HIGH | 7.5 | 0.6% | Nov 3, 2022 | OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardware_device_manager when joining a netwo... |
| CVE-2022-43451 | MEDIUM | 6.5 | 0.2% | Nov 3, 2022 | OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services. L... |
| CVE-2022-43449 | MEDIUM | 5.5 | 0.2% | Nov 3, 2022 | OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can ... |
| CVE-2022-43063 | HIGH | 7.2 | 0.7% | Nov 3, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43062 | HIGH | 7.2 | 0.7% | Nov 3, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43061 | HIGH | 7.2 | 0.9% | Nov 3, 2022 | Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the co... |
| CVE-2022-42749 | MEDIUM | 6.1 | 1.1% | Nov 3, 2022 | CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitra... |
| CVE-2022-42748 | MEDIUM | 6.1 | 1.1% | Nov 3, 2022 | CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie o... |
| CVE-2022-42747 | MEDIUM | 6.1 | 1.1% | Nov 3, 2022 | CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbit... |
| CVE-2022-42746 | MEDIUM | 6.1 | 1.1% | Nov 3, 2022 | CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of ar... |
| CVE-2022-42745 | HIGH | 7.5 | 0.8% | Nov 3, 2022 | CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because th... |
| CVE-2022-42744 | CRITICAL | 9.8 | 1.2% | Nov 3, 2022 | CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is pos... |
| CVE-2022-42743 | MEDIUM | 5.3 | 0.6% | Nov 3, 2022 | deep-parse-json version 1.0.2 allows an external attacker to edit or add new properties to an object. This is possible b... |
| CVE-2022-42442 | LOW | 3.3 | 0.2% | Nov 3, 2022 | IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of th... |
| CVE-2022-41714 | MEDIUM | 5.3 | 0.6% | Nov 3, 2022 | fastest-json-copy version 1.0.1 allows an external attacker to edit or add new properties to an object. This is possible... |
| CVE-2022-41713 | MEDIUM | 5.3 | 0.6% | Nov 3, 2022 | deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible ... |
| CVE-2022-41710 | MEDIUM | 5.5 | 0.4% | Nov 3, 2022 | Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attemp... |
| CVE-2022-40747 | CRITICAL | 9.1 | 0.9% | Nov 3, 2022 | "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing X... |
| CVE-2022-40276 | MEDIUM | 5.5 | 0.4% | Nov 3, 2022 | Zettlr version 2.3.0 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to... |
| CVE-2022-40235 | MEDIUM | 6.5 | 0.6% | Nov 3, 2022 | "IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run j... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now