2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-50975 | HIGH | 8.8 | 0.2% | Feb 2, 2026 | An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the... |
| CVE-2022-50952 | MEDIUM | 6.4 | 0.2% | Feb 1, 2026 | Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Nam... |
| CVE-2022-50951 | MEDIUM | 6.4 | 0.3% | Feb 1, 2026 | WiFi File Transfer 1.0.8 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject... |
| CVE-2022-50950 | HIGH | 7.1 | 0.9% | Feb 1, 2026 | Webile 1.0.1 contains a directory traversal vulnerability that allows remote attackers to manipulate file system paths w... |
| CVE-2022-50942 | MEDIUM | 5.4 | 0.3% | Feb 1, 2026 | Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malic... |
| CVE-2022-50941 | MEDIUM | 6.4 | 0.3% | Feb 1, 2026 | BootCommerce 3.2.1 contains persistent input validation vulnerabilities that allow remote attackers to inject malicious ... |
| CVE-2022-50940 | MEDIUM | 6.4 | 0.3% | Feb 1, 2026 | Knap Advanced PHP Login 3.1.3 contains a persistent cross-site scripting vulnerability that allows remote attackers to i... |
| CVE-2022-50797 | MEDIUM | 6.4 | 0.4% | Feb 1, 2026 | Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote at... |
| CVE-2022-40620 | HIGH | 7.7 | 0.3% | Jan 28, 2026 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS ce... |
| CVE-2022-40619 | HIGH | 7.7 | 2.2% | Jan 28, 2026 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the L... |
| CVE-2022-25369 | CRITICAL | 9.8 | 40.7% | Jan 23, 2026 | An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication... |
| CVE-2022-43560 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-43559 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-43558 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-34214 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-32150 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-24911 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-24380 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-22147 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-21130 | — | — | — | Jan 22, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. |
| CVE-2022-50939 | HIGH | 8.6 | 1.1% | Jan 13, 2026 | e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators to overrid... |
| CVE-2022-50938 | HIGH | 8.5 | 0.2% | Jan 13, 2026 | CONTPAQi AdminPAQ 14.0.0 contains an unquoted service path vulnerability in the AppKeyLicenseServer service running with... |
| CVE-2022-50937 | MEDIUM | 6.1 | 0.3% | Jan 13, 2026 | Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for exte... |
| CVE-2022-50936 | HIGH | 8.8 | 0.8% | Jan 13, 2026 | WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload mal... |
| CVE-2022-50935 | CRITICAL | 9.8 | 0.4% | Jan 13, 2026 | Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now