2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0150 | MEDIUM | 6.1 | 1.7% | Feb 28, 2022 | The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before... |
| CVE-2022-26159 | MEDIUM | 5.3 | 13.4% | Feb 28, 2022 | The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as... |
| CVE-2022-0772 | MEDIUM | 4.8 | 0.6% | Feb 27, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2. |
| CVE-2022-22908 | MEDIUM | 5.5 | 0.3% | Feb 26, 2022 | SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to dis... |
| CVE-2022-26149 | HIGH | 7.2 | 9.3% | Feb 26, 2022 | MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an ex... |
| CVE-2022-26146 | MEDIUM | 5.4 | 0.4% | Feb 26, 2022 | Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker. |
| CVE-2022-0764 | MEDIUM | 6.7 | 0.8% | Feb 26, 2022 | Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0. |
| CVE-2022-0723 | MEDIUM | 5.4 | 0.9% | Feb 26, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11. |
| CVE-2022-0763 | MEDIUM | 4.8 | 0.6% | Feb 26, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3. |
| CVE-2022-0762 | MEDIUM | 4.3 | 0.6% | Feb 26, 2022 | Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3. |
| CVE-2022-25359 | CRITICAL | 9.1 | 37.3% | Feb 26, 2022 | On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, dele... |
| CVE-2022-24986 | HIGH | 7.8 | 0.2% | Feb 26, 2022 | KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. ... |
| CVE-2022-23308 | HIGH | 7.5 | 5.1% | Feb 26, 2022 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. |
| CVE-2022-25096 | CRITICAL | 9.8 | 2.1% | Feb 26, 2022 | Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet... |
| CVE-2022-25095 | CRITICAL | 9.8 | 1.3% | Feb 26, 2022 | Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted... |
| CVE-2022-25094 | HIGH | 8.8 | 23.3% | Feb 26, 2022 | Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via ... |
| CVE-2022-21706 | CRITICAL | 9.8 | 1.3% | Feb 26, 2022 | Zulip is an open-source team collaboration tool with topic-based threading. Zulip Server version 2.0.0 and above are vul... |
| CVE-2022-24710 | MEDIUM | 5.4 | 0.7% | Feb 25, 2022 | Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutrali... |
| CVE-2022-25264 | HIGH | 7.5 | 0.9% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases. |
| CVE-2022-25263 | CRITICAL | 9.8 | 2.1% | Feb 25, 2022 | JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration. |
| CVE-2022-25262 | CRITICAL | 9.8 | 1.4% | Feb 25, 2022 | In JetBrains Hub before 2022.1.14434, SAML request takeover was possible. |
| CVE-2022-25261 | MEDIUM | 6.1 | 0.5% | Feb 25, 2022 | JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS. |
| CVE-2022-25260 | CRITICAL | 9.1 | 2.4% | Feb 25, 2022 | JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF). |
| CVE-2022-25259 | MEDIUM | 6.1 | 0.5% | Feb 25, 2022 | JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS. |
| CVE-2022-25064 | CRITICAL | 9.8 | 39.8% | Feb 25, 2022 | TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the functio... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now