2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32287 | HIGH | 7.5 | 1.6% | Nov 3, 2022 | A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows ... |
| CVE-2022-44638 | HIGH | 8.8 | 1.4% | Nov 3, 2022 | In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edge... |
| CVE-2022-44586 | MEDIUM | 4.8 | 0.4% | Nov 2, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) in Ayoub Media AM-HiLi plugin <= 1.0 on WordPress. |
| CVE-2022-44576 | MEDIUM | 4.8 | 0.4% | Nov 2, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in AgentEasy Properties plugin <= 1.0.4 on WordPress. |
| CVE-2022-24945 | — | — | — | Nov 2, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-3181 | HIGH | 7.5 | 0.7% | Nov 2, 2022 | An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifically malform... |
| CVE-2022-43068 | HIGH | 7.2 | 0.7% | Nov 2, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43066 | HIGH | 7.2 | 0.8% | Nov 2, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-3845 | MEDIUM | 6.1 | 0.5% | Nov 2, 2022 | A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown fu... |
| CVE-2022-3844 | MEDIUM | 6.1 | 0.6% | Nov 2, 2022 | A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the ... |
| CVE-2022-2904 | MEDIUM | 5.4 | 0.6% | Nov 2, 2022 | A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5... |
| CVE-2022-24936 | CRITICAL | 9.1 | 0.8% | Nov 2, 2022 | Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrit... |
| CVE-2022-43227 | HIGH | 7.2 | 0.7% | Nov 2, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43226 | HIGH | 8.8 | 0.8% | Nov 2, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-3575 | CRITICAL | 9.8 | 0.7% | Nov 2, 2022 | Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload wi... |
| CVE-2022-39378 | MEDIUM | 5.3 | 0.5% | Nov 2, 2022 | Discourse is a platform for community discussion. Under certain conditions, a user badge may have been awarded based on ... |
| CVE-2022-39356 | HIGH | 8.8 | 0.6% | Nov 2, 2022 | Discourse is a platform for community discussion. Users who receive an invitation link that is not scoped to a single em... |
| CVE-2022-39353 | CRITICAL | 9.8 | 1.2% | Nov 2, 2022 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom par... |
| CVE-2022-39241 | MEDIUM | 4.9 | 0.5% | Nov 2, 2022 | Discourse is a platform for community discussion. A malicious admin could use this vulnerability to perform port enumera... |
| CVE-2022-41716 | HIGH | 7.5 | 0.8% | Nov 2, 2022 | Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.Sta... |
| CVE-2022-41551 | HIGH | 7.2 | 0.8% | Nov 2, 2022 | Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/ed... |
| CVE-2022-39381 | MEDIUM | 5.5 | 0.6% | Nov 2, 2022 | Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron (based/replacement on/of galkh... |
| CVE-2022-43995 | HIGH | 7.1 | 0.3% | Nov 2, 2022 | Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-boun... |
| CVE-2022-43255 | MEDIUM | 5.5 | 0.3% | Nov 2, 2022 | GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/o... |
| CVE-2022-43254 | MEDIUM | 5.5 | 0.3% | Nov 2, 2022 | GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/li... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now