2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41154 | MEDIUM | 6.5 | 1.9% | Jan 26, 2023 | A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-2107... |
| CVE-2022-38088 | MEDIUM | 6.5 | 2.3% | Jan 26, 2023 | A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-21072... |
| CVE-2022-4054 | MEDIUM | 5.5 | 0.7% | Jan 26, 2023 | An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting fro... |
| CVE-2022-47073 | MEDIUM | 5.4 | 0.6% | Jan 26, 2023 | A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows attackers to execute arbit... |
| CVE-2022-47052 | MEDIUM | 6.1 | 0.6% | Jan 26, 2023 | The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can b... |
| CVE-2022-46957 | MEDIUM | 6.1 | 0.5% | Jan 26, 2023 | Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-46624 | MEDIUM | 6.1 | 0.5% | Jan 26, 2023 | A cross-site scripting (XSS) vulnerability in Online Graduate Tracer System v1.0.0 allows attackers to execute arbitrary... |
| CVE-2022-46128 | MEDIUM | 6.1 | 0.5% | Jan 26, 2023 | phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=. |
| CVE-2022-45730 | MEDIUM | 6.1 | 0.5% | Jan 26, 2023 | A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute ar... |
| CVE-2022-41941 | MEDIUM | 4.8 | 0.6% | Jan 26, 2023 | GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cros... |
| CVE-2022-40036 | MEDIUM | 6.5 | 0.7% | Jan 26, 2023 | An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing pe... |
| CVE-2022-3902 | MEDIUM | 6.4 | 0.7% | Jan 26, 2023 | An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting fro... |
| CVE-2022-3820 | MEDIUM | 6.5 | 0.7% | Jan 26, 2023 | An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5... |
| CVE-2022-3740 | MEDIUM | 4.9 | 0.9% | Jan 26, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3.5, 15.4 prior to 15... |
| CVE-2022-3572 | MEDIUM | 6.1 | 1.1% | Jan 26, 2023 | A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions from 13.5 prior to 15.3.5, 15.4 ... |
| CVE-2022-3482 | MEDIUM | 5.3 | 1.0% | Jan 26, 2023 | An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4,... |
| CVE-2022-3478 | MEDIUM | 4.3 | 1.0% | Jan 26, 2023 | An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting fr... |
| CVE-2022-3432 | MEDIUM | 6.7 | 0.3% | Jan 26, 2023 | A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly no... |
| CVE-2022-38758 | MEDIUM | 6.1 | 0.4% | Jan 26, 2023 | Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious s... |
| CVE-2022-31711 | MEDIUM | 5.3 | 21.7% | Jan 26, 2023 | VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sen... |
| CVE-2022-27507 | MEDIUM | 6.5 | 1.0% | Jan 26, 2023 | Authenticated denial of service |
| CVE-2022-26329 | MEDIUM | 5.3 | 0.5% | Jan 26, 2023 | File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to deter... |
| CVE-2022-25847 | MEDIUM | 6.1 | 0.6% | Jan 26, 2023 | All versions of the package serve-lite are vulnerable to Cross-site Scripting (XSS) because when it detects a request to... |
| CVE-2022-20494 | MEDIUM | 5.5 | 0.4% | Jan 26, 2023 | In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could ... |
| CVE-2022-20458 | MEDIUM | 5.5 | 0.1% | Jan 26, 2023 | The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" bu... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now