2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23779 | MEDIUM | 5.3 | 15.1% | Mar 2, 2022 | Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname ... |
| CVE-2022-23395 | MEDIUM | 6.1 | 1.1% | Mar 2, 2022 | jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS). |
| CVE-2022-0829 | HIGH | 8.1 | 1.3% | Mar 2, 2022 | Improper Authorization in GitHub repository webmin/webmin prior to 1.990. |
| CVE-2022-0824 | HIGH | 8.8 | 97.0% | Mar 2, 2022 | Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990. |
| CVE-2022-22303 | MEDIUM | 5.5 | 0.2% | Mar 2, 2022 | An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager ve... |
| CVE-2022-22301 | HIGH | 7.8 | 0.3% | Mar 2, 2022 | An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 t... |
| CVE-2022-0577 | MEDIUM | 6.5 | 1.2% | Mar 2, 2022 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1. |
| CVE-2022-25051 | MEDIUM | 5.5 | 0.7% | Mar 2, 2022 | An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file. |
| CVE-2022-25050 | MEDIUM | 5.5 | 0.8% | Mar 2, 2022 | rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This vulnerability allows ... |
| CVE-2022-25012 | MEDIUM | 5.5 | 0.3% | Mar 1, 2022 | Argus Surveillance DVR v4.0 employs weak password encryption. |
| CVE-2022-25010 | CRITICAL | 9.1 | 1.0% | Mar 1, 2022 | The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system. |
| CVE-2022-24720 | CRITICAL | 9.8 | 2.6% | Mar 1, 2022 | image_processing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, usi... |
| CVE-2022-24255 | HIGH | 8.8 | 1.6% | Mar 1, 2022 | Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator pri... |
| CVE-2022-24254 | HIGH | 8.8 | 2.9% | Mar 1, 2022 | An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remo... |
| CVE-2022-24253 | HIGH | 8.8 | 1.6% | Mar 1, 2022 | Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the compon... |
| CVE-2022-24252 | HIGH | 8.8 | 2.9% | Mar 1, 2022 | An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote ... |
| CVE-2022-24251 | HIGH | 8.8 | 1.6% | Mar 1, 2022 | Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalo... |
| CVE-2022-24719 | MEDIUM | 6.1 | 0.8% | Mar 1, 2022 | Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `followRedirects` or `followRedirec... |
| CVE-2022-24718 | MEDIUM | 6.5 | 1.1% | Mar 1, 2022 | ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.4, a path tra... |
| CVE-2022-24717 | MEDIUM | 6.1 | 0.8% | Mar 1, 2022 | ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross si... |
| CVE-2022-22300 | HIGH | 8.8 | 0.9% | Mar 1, 2022 | A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, Fo... |
| CVE-2022-23387 | HIGH | 7.5 | 1.2% | Mar 1, 2022 | An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment... |
| CVE-2022-22321 | MEDIUM | 5.5 | 0.2% | Mar 1, 2022 | IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protect... |
| CVE-2022-23380 | HIGH | 8.8 | 1.0% | Mar 1, 2022 | There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit. |
| CVE-2022-23377 | HIGH | 7.5 | 2.1% | Mar 1, 2022 | Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now