2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0253 | MEDIUM | 5.4 | 0.8% | Jan 17, 2022 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2022-0240 | HIGH | 7.5 | 1.0% | Jan 17, 2022 | mruby is vulnerable to NULL Pointer Dereference |
| CVE-2022-0184 | MEDIUM | 4.3 | 0.3% | Jan 17, 2022 | Insufficiently protected credentials vulnerability in 'TEPRA' PRO SR5900P Ver.1.080 and earlier and 'TEPRA' PRO SR-R7900... |
| CVE-2022-0183 | MEDIUM | 4.6 | 0.1% | Jan 17, 2022 | Missing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware... |
| CVE-2022-0182 | MEDIUM | 5.4 | 1.0% | Jan 17, 2022 | Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticate... |
| CVE-2022-0181 | MEDIUM | 6.1 | 1.3% | Jan 17, 2022 | Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker ... |
| CVE-2022-0180 | HIGH | 8.8 | 0.7% | Jan 17, 2022 | Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attack... |
| CVE-2022-0131 | LOW | 3.3 | 0.2% | Jan 17, 2022 | Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vu... |
| CVE-2022-0239 | CRITICAL | 9.8 | 1.2% | Jan 17, 2022 | corenlp is vulnerable to Improper Restriction of XML External Entity Reference |
| CVE-2022-23304 | CRITICAL | 9.8 | 1.9% | Jan 17, 2022 | The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel atta... |
| CVE-2022-23303 | CRITICAL | 9.8 | 2.9% | Jan 17, 2022 | The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks ... |
| CVE-2022-0235 | MEDIUM | 6.1 | 1.7% | Jan 16, 2022 | node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2022-0238 | MEDIUM | 4.3 | 0.8% | Jan 16, 2022 | phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2022-23178 | CRITICAL | 9.8 | 75.7% | Jan 15, 2022 | An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI ... |
| CVE-2022-23095 | HIGH | 7.8 | 1.1% | Jan 15, 2022 | Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a craf... |
| CVE-2022-23094 | HIGH | 7.5 | 2.7% | Jan 15, 2022 | Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cras... |
| CVE-2022-22531 | HIGH | 8.1 | 0.8% | Jan 14, 2022 | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check ... |
| CVE-2022-22530 | HIGH | 8.1 | 0.9% | Jan 14, 2022 | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check ... |
| CVE-2022-22529 | MEDIUM | 6.1 | 0.6% | Jan 14, 2022 | SAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled inputs which may lead ... |
| CVE-2022-22290 | MEDIUM | 6.5 | 0.8% | Jan 14, 2022 | Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoo... |
| CVE-2022-21137 | HIGH | 7.8 | 9.3% | Jan 14, 2022 | Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project f... |
| CVE-2022-0130 | HIGH | 8.1 | 1.6% | Jan 14, 2022 | Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow ... |
| CVE-2022-0226 | MEDIUM | 4.3 | 0.4% | Jan 14, 2022 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2022-23227 | CRITICAL | 9.8 | 49.4% | Jan 14, 2022 | NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to... |
| CVE-2022-0224 | CRITICAL | 9.8 | 2.0% | Jan 14, 2022 | dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now