2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23378 | MEDIUM | 5.4 | 1.1% | Feb 9, 2022 | A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D"... |
| CVE-2022-0536 | MEDIUM | 5.9 | 1.3% | Feb 9, 2022 | Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8. |
| CVE-2022-24694 | MEDIUM | 4.3 | 0.7% | Feb 9, 2022 | In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area c... |
| CVE-2022-0527 | MEDIUM | 6.1 | 0.8% | Feb 9, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0. |
| CVE-2022-0526 | MEDIUM | 6.1 | 0.8% | Feb 9, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0. |
| CVE-2022-24682 | MEDIUM | 6.1 | 30.9% | Feb 9, 2022 | An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), a... |
| CVE-2022-0525 | CRITICAL | 9.1 | 1.2% | Feb 9, 2022 | Out-of-bounds Read in Homebrew mruby prior to 3.2. |
| CVE-2022-24677 | CRITICAL | 9.8 | 2.3% | Feb 9, 2022 | Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration informatio... |
| CVE-2022-24676 | HIGH | 8.8 | 1.5% | Feb 9, 2022 | update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive. |
| CVE-2022-23627 | MEDIUM | 6.8 | 1.0% | Feb 8, 2022 | ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneousl... |
| CVE-2022-23626 | HIGH | 8.8 | 9.9% | Feb 8, 2022 | m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` ... |
| CVE-2022-0524 | HIGH | 7.5 | 1.5% | Feb 8, 2022 | Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. |
| CVE-2022-21713 | MEDIUM | 4.3 | 1.2% | Feb 8, 2022 | Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API en... |
| CVE-2022-21703 | HIGH | 8.8 | 2.3% | Feb 8, 2022 | Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site reque... |
| CVE-2022-0523 | HIGH | 7.8 | 1.1% | Feb 8, 2022 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. |
| CVE-2022-0522 | HIGH | 7.1 | 0.9% | Feb 8, 2022 | Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2. |
| CVE-2022-0521 | HIGH | 7.1 | 0.9% | Feb 8, 2022 | Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. |
| CVE-2022-0520 | HIGH | 7.8 | 1.1% | Feb 8, 2022 | Use After Free in NPM radare2.js prior to 5.6.2. |
| CVE-2022-0519 | HIGH | 7.1 | 0.9% | Feb 8, 2022 | Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2. |
| CVE-2022-0518 | HIGH | 7.1 | 1.0% | Feb 8, 2022 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2. |
| CVE-2022-21702 | MEDIUM | 5.4 | 2.4% | Feb 8, 2022 | Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML c... |
| CVE-2022-0139 | CRITICAL | 9.8 | 1.2% | Feb 8, 2022 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0. |
| CVE-2022-0510 | MEDIUM | 5.4 | 0.7% | Feb 8, 2022 | Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1. |
| CVE-2022-23340 | CRITICAL | 9.8 | 1.5% | Feb 8, 2022 | Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results. |
| CVE-2022-23331 | HIGH | 8.8 | 1.2% | Feb 8, 2022 | In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the admini... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now