2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21940 | MEDIUM | 6.1 | 0.4% | Feb 9, 2023 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool... |
| CVE-2022-21939 | MEDIUM | 6.1 | 0.5% | Feb 9, 2023 | Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 pr... |
| CVE-2022-43552 | MEDIUM | 5.9 | 2.5% | Feb 9, 2023 | A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports... |
| CVE-2022-48296 | MEDIUM | 5.3 | 0.3% | Feb 9, 2023 | The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users... |
| CVE-2022-48293 | MEDIUM | 6.5 | 0.2% | Feb 9, 2023 | The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentia... |
| CVE-2022-48292 | MEDIUM | 6.5 | 0.2% | Feb 9, 2023 | The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect ... |
| CVE-2022-30564 | MEDIUM | 5.3 | 0.4% | Feb 9, 2023 | Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a spe... |
| CVE-2022-38778 | MEDIUM | 6.5 | 0.9% | Feb 8, 2023 | A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated us... |
| CVE-2022-4304 | MEDIUM | 5.9 | 16.2% | Feb 8, 2023 | A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a p... |
| CVE-2022-45755 | MEDIUM | 5.4 | 0.4% | Feb 8, 2023 | Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page ... |
| CVE-2022-35720 | MEDIUM | 5.5 | 0.1% | Feb 8, 2023 | IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptogr... |
| CVE-2022-34362 | MEDIUM | 4.6 | 0.4% | Feb 8, 2023 | IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the H... |
| CVE-2022-2094 | MEDIUM | 6.1 | 0.5% | Feb 8, 2023 | The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back ... |
| CVE-2022-45192 | MEDIUM | 6.5 | 0.2% | Feb 8, 2023 | An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of servi... |
| CVE-2022-45191 | MEDIUM | 6.5 | 0.2% | Feb 8, 2023 | An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of servi... |
| CVE-2022-45190 | MEDIUM | 5.3 | 0.3% | Feb 8, 2023 | An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in... |
| CVE-2022-40480 | MEDIUM | 6.5 | 0.3% | Feb 8, 2023 | Nordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attackers... |
| CVE-2022-47418 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site script... |
| CVE-2022-47419 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product ta... |
| CVE-2022-47417 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site script... |
| CVE-2022-47416 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the i... |
| CVE-2022-47415 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site script... |
| CVE-2022-47414 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in ... |
| CVE-2022-47413 | MEDIUM | 5.4 | 0.5% | Feb 7, 2023 | Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II")... |
| CVE-2022-47412 | MEDIUM | 5.4 | 0.6% | Feb 7, 2023 | Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now