2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-30300 | MEDIUM | 6.5 | 0.8% | Feb 16, 2023 | A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions... |
| CVE-2022-30299 | MEDIUM | 4.3 | 0.5% | Feb 16, 2023 | A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versio... |
| CVE-2022-48306 | MEDIUM | 6.8 | 0.3% | Feb 16, 2023 | Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows ... |
| CVE-2022-27891 | MEDIUM | 5.3 | 0.4% | Feb 16, 2023 | Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active sessio... |
| CVE-2022-38731 | MEDIUM | 4.3 | 0.7% | Feb 16, 2023 | Qaelum DOSE 18.08 through 21.1 before 21.2 allows Directory Traversal via the loadimages name parameter. It allows a use... |
| CVE-2022-45543 | MEDIUM | 6.1 | 0.5% | Feb 15, 2023 | Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, ti... |
| CVE-2022-45587 | MEDIUM | 5.5 | 0.3% | Feb 15, 2023 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial o... |
| CVE-2022-45586 | MEDIUM | 5.5 | 0.3% | Feb 15, 2023 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a deni... |
| CVE-2022-45154 | MEDIUM | 5.5 | 0.2% | Feb 15, 2023 | A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Lin... |
| CVE-2022-25978 | MEDIUM | 6.1 | 0.5% | Feb 15, 2023 | All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insuffi... |
| CVE-2022-47373 | MEDIUM | 6.1 | 0.3% | Feb 15, 2023 | Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vul... |
| CVE-2022-47372 | MEDIUM | 5.4 | 0.2% | Feb 15, 2023 | Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker... |
| CVE-2022-45437 | MEDIUM | 4.8 | 0.4% | Feb 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandor... |
| CVE-2022-45436 | MEDIUM | 4.8 | 0.6% | Feb 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandor... |
| CVE-2022-41564 | MEDIUM | 6.5 | 0.5% | Feb 14, 2023 | The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains ... |
| CVE-2022-22564 | MEDIUM | 5.9 | 0.5% | Feb 14, 2023 | Dell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm. A remote unauthenticated attacker... |
| CVE-2022-4286 | MEDIUM | 6.1 | 0.6% | Feb 14, 2023 | A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime ver... |
| CVE-2022-35868 | MEDIUM | 6.7 | 0.2% | Feb 14, 2023 | A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions <... |
| CVE-2022-3411 | MEDIUM | 6.5 | 1.2% | Feb 13, 2023 | A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8... |
| CVE-2022-4905 | MEDIUM | 6.1 | 0.7% | Feb 13, 2023 | A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vu... |
| CVE-2022-45962 | MEDIUM | 6.5 | 0.9% | Feb 13, 2023 | Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL Injection via Calendar... |
| CVE-2022-48110 | MEDIUM | 6.1 | 2.1% | Feb 13, 2023 | CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CK... |
| CVE-2022-45285 | MEDIUM | 6.1 | 0.5% | Feb 13, 2023 | Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-4830 | MEDIUM | 5.4 | 65.0% | Feb 13, 2023 | The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes bef... |
| CVE-2022-4783 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The Youtube Channel Gallery WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes b... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now