2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-33077 | HIGH | 7.5 | 0.8% | Oct 19, 2022 | An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the add... |
| CVE-2022-41500 | HIGH | 8.8 | 0.4% | Oct 18, 2022 | EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Cent... |
| CVE-2022-42218 | HIGH | 7.2 | 0.7% | Oct 18, 2022 | Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php. |
| CVE-2022-42117 | MEDIUM | 6.1 | 0.5% | Oct 18, 2022 | A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and L... |
| CVE-2022-42116 | MEDIUM | 6.1 | 0.5% | Oct 18, 2022 | A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7... |
| CVE-2022-42115 | MEDIUM | 5.4 | 0.5% | Oct 18, 2022 | Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 throu... |
| CVE-2022-42114 | MEDIUM | 5.4 | 0.5% | Oct 18, 2022 | A Cross-site scripting (XSS) vulnerability in the Role module's edit role assignees page in Liferay Portal 7.4.0 through... |
| CVE-2022-42113 | MEDIUM | 6.1 | 0.5% | Oct 18, 2022 | A Cross-site scripting (XSS) vulnerability in Document Library module in Liferay Portal 7.4.3.30 through 7.4.3.36, and L... |
| CVE-2022-42112 | MEDIUM | 5.4 | 0.5% | Oct 18, 2022 | A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4... |
| CVE-2022-39428 | CRITICAL | 9.8 | 36.5% | Oct 18, 2022 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). ... |
| CVE-2022-39427 | HIGH | 8.8 | 0.3% | Oct 18, 2022 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar... |
| CVE-2022-39426 | HIGH | 8.1 | 1.1% | Oct 18, 2022 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar... |
| CVE-2022-39425 | HIGH | 8.1 | 1.6% | Oct 18, 2022 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar... |
| CVE-2022-39424 | HIGH | 8.1 | 1.3% | Oct 18, 2022 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar... |
| CVE-2022-39423 | MEDIUM | 6 | 0.5% | Oct 18, 2022 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar... |
| CVE-2022-39422 | HIGH | 7.5 | 0.4% | Oct 18, 2022 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar... |
| CVE-2022-39421 | HIGH | 7.3 | 0.4% | Oct 18, 2022 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar... |
| CVE-2022-39420 | MEDIUM | 5.4 | 0.4% | Oct 18, 2022 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Securi... |
| CVE-2022-39419 | MEDIUM | 4.3 | 0.5% | Oct 18, 2022 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. ... |
| CVE-2022-39417 | MEDIUM | 5.5 | 0.2% | Oct 18, 2022 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is aff... |
| CVE-2022-39412 | HIGH | 7.5 | 1.7% | Oct 18, 2022 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported... |
| CVE-2022-39411 | MEDIUM | 4.9 | 0.6% | Oct 18, 2022 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automa... |
| CVE-2022-39410 | MEDIUM | 6.5 | 1.2% | Oct 18, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af... |
| CVE-2022-39409 | LOW | 2.7 | 0.7% | Oct 18, 2022 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automa... |
| CVE-2022-39408 | MEDIUM | 6.5 | 1.2% | Oct 18, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now