2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-31456MEDIUM6.1A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML ...
CVE-2022-43713HIGH7.5Interactive Forms (IAF) in GX Software XperienCentral versions 10.33.1 until 10.35.0 was vulnerable to invalid data inpu...
CVE-2022-43712MEDIUM6.5POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are n...
CVE-2022-43711MEDIUM6.1Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site script...
CVE-2022-43710HIGH8.8Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site reques...
CVE-2022-4608HIGH7.5A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vu...
CVE-2022-2502HIGH7.5A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. Th...
CVE-2022-31457HIGH7.5RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/.
CVE-2022-46902HIGH7.5An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip...
CVE-2022-46901HIGH7.5An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation f...
CVE-2022-46900MEDIUM6.5An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Ex...
CVE-2022-46899HIGH7.5An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The Ba...
CVE-2022-46898CRITICAL9.8An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the "resto...
CVE-2022-31458MEDIUM6.1RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning.
CVE-2022-30280HIGH8.8/SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with a...
CVE-2022-28867MEDIUM5.4An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user ...
CVE-2022-28865MEDIUM5.4An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can cha...
CVE-2022-28864HIGH8.8An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user ...
CVE-2022-28863HIGH8.8An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuratio...
CVE-2022-46295HIGH7.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported...
CVE-2022-46294HIGH7.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported...
CVE-2022-46293HIGH7.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported...
CVE-2022-46292HIGH7.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported...
CVE-2022-46291HIGH7.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported...
CVE-2022-46290HIGH7.8Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and maste...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now