2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0777 | HIGH | 7.5 | 1.2% | Mar 1, 2022 | Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3. |
| CVE-2022-0776 | MEDIUM | 6.1 | 3.7% | Mar 1, 2022 | Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0. |
| CVE-2022-25022 | MEDIUM | 5.4 | 1.1% | Mar 1, 2022 | A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a c... |
| CVE-2022-25020 | MEDIUM | 5.4 | 1.2% | Mar 1, 2022 | A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML vi... |
| CVE-2022-25018 | HIGH | 8.8 | 2.6% | Mar 1, 2022 | Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static page... |
| CVE-2022-24446 | MEDIUM | 4.3 | 1.0% | Mar 1, 2022 | An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH se... |
| CVE-2022-22262 | HIGH | 7.7 | 0.2% | Mar 1, 2022 | ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file ... |
| CVE-2022-26332 | MEDIUM | 5.4 | 0.7% | Mar 1, 2022 | Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field. |
| CVE-2022-25413 | MEDIUM | 5.4 | 0.5% | Feb 28, 2022 | Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at... |
| CVE-2022-25412 | HIGH | 8.1 | 1.0% | Feb 28, 2022 | Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-upd... |
| CVE-2022-25411 | CRITICAL | 9.8 | 2.8% | Feb 28, 2022 | A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary ... |
| CVE-2022-25410 | MEDIUM | 5.4 | 0.5% | Feb 28, 2022 | Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_de... |
| CVE-2022-25409 | MEDIUM | 5.4 | 0.5% | Feb 28, 2022 | Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dema... |
| CVE-2022-25408 | MEDIUM | 5.4 | 0.5% | Feb 28, 2022 | Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpas... |
| CVE-2022-25407 | MEDIUM | 5.4 | 0.5% | Feb 28, 2022 | Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doct... |
| CVE-2022-25029 | — | — | — | Feb 28, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-25096. Reason: This candidate is a duplicate of ... |
| CVE-2022-25028 | MEDIUM | 6.1 | 0.6% | Feb 28, 2022 | Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via t... |
| CVE-2022-23907 | MEDIUM | 6.1 | 0.6% | Feb 28, 2022 | CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter... |
| CVE-2022-23906 | HIGH | 7.2 | 2.1% | Feb 28, 2022 | CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar f... |
| CVE-2022-0743 | MEDIUM | 4.6 | 1.3% | Feb 28, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31. |
| CVE-2022-26315 | MEDIUM | 5.3 | 1.2% | Feb 28, 2022 | qrcp through 0.8.4, in receive mode, allows ../ Directory Traversal via the file name specified by the uploader. |
| CVE-2022-26181 | HIGH | 7.8 | 0.9% | Feb 28, 2022 | Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():sr... |
| CVE-2022-25023 | HIGH | 8.8 | 1.2% | Feb 28, 2022 | Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt():AudioFile.h. |
| CVE-2022-25015 | MEDIUM | 5.4 | 0.7% | Feb 28, 2022 | A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted p... |
| CVE-2022-25014 | MEDIUM | 6.1 | 0.7% | Feb 28, 2022 | Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "m" parameter i... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now