2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41996 | HIGH | 8.8 | 0.5% | Oct 27, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leadin... |
| CVE-2022-40184 | MEDIUM | 4.8 | 0.3% | Oct 27, 2022 | Incomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET mul... |
| CVE-2022-40183 | MEDIUM | 4.7 | 0.3% | Oct 27, 2022 | An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-bas... |
| CVE-2022-3725 | HIGH | 7.5 | 0.8% | Oct 27, 2022 | Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafte... |
| CVE-2022-24670 | MEDIUM | 6.5 | 0.5% | Oct 27, 2022 | An attacker can use the unrestricted LDAP queries to determine configuration entries |
| CVE-2022-24669 | MEDIUM | 6.5 | 0.4% | Oct 27, 2022 | It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be ... |
| CVE-2022-3095 | CRITICAL | 9.8 | 0.9% | Oct 27, 2022 | The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3... |
| CVE-2022-39365 | CRITICAL | 9.8 | 1.7% | Oct 27, 2022 | Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig tem... |
| CVE-2022-39364 | MEDIUM | 6.5 | 0.5% | Oct 27, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server pri... |
| CVE-2022-42993 | MEDIUM | 5.4 | 0.6% | Oct 27, 2022 | Password Storage Application v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Setup pag... |
| CVE-2022-42991 | MEDIUM | 5.4 | 0.6% | Oct 27, 2022 | A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execut... |
| CVE-2022-39330 | MEDIUM | 4.3 | 0.8% | Oct 27, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior ... |
| CVE-2022-39329 | MEDIUM | 5.3 | 0.6% | Oct 27, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Ne... |
| CVE-2022-38744 | HIGH | 7.5 | 1.1% | Oct 27, 2022 | An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service... |
| CVE-2022-3409 | HIGH | 7.5 | 0.6% | Oct 27, 2022 | A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified d... |
| CVE-2022-36182 | MEDIUM | 6.1 | 0.5% | Oct 27, 2022 | Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direct... |
| CVE-2022-2809 | HIGH | 7.5 | 0.6% | Oct 27, 2022 | A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser c... |
| CVE-2022-42992 | MEDIUM | 5.4 | 0.6% | Oct 27, 2022 | Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitr... |
| CVE-2022-3719 | — | — | — | Oct 27, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-3718 | — | — | — | Oct 27, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-3717 | — | — | — | Oct 27, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-3716 | MEDIUM | 5.4 | 0.3% | Oct 27, 2022 | A vulnerability classified as problematic was found in SourceCodester Online Medicine Ordering System 1.0. Affected by t... |
| CVE-2022-3714 | CRITICAL | 9.8 | 0.4% | Oct 27, 2022 | A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is... |
| CVE-2022-2782 | CRITICAL | 9.1 | 0.5% | Oct 27, 2022 | In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper valid... |
| CVE-2022-2508 | MEDIUM | 5.3 | 0.5% | Oct 27, 2022 | In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now