2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34297 | MEDIUM | 5.4 | 0.6% | Dec 9, 2022 | Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field. |
| CVE-2022-41299 | MEDIUM | 5.4 | 0.3% | Dec 9, 2022 | IBM Cloud Transformation Advisor 2.0.1 through 3.3.1 is vulnerable to cross-site scripting. This vulnerability allows us... |
| CVE-2022-4336 | MEDIUM | 5.4 | 0.3% | Dec 9, 2022 | In BAOTA linux panel there exists a stored xss vulnerability attackers can use to obtain sensitive information via the l... |
| CVE-2022-29839 | MEDIUM | 5.5 | 0.1% | Dec 9, 2022 | Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices... |
| CVE-2022-29838 | MEDIUM | 4.6 | 0.3% | Dec 9, 2022 | Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devic... |
| CVE-2022-25630 | MEDIUM | 5.4 | 1.5% | Dec 9, 2022 | An authenticated user can embed malicious content with XSS into the admin group policy page. |
| CVE-2022-25629 | MEDIUM | 5.4 | 0.4% | Dec 9, 2022 | An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation... |
| CVE-2022-4264 | MEDIUM | 4.3 | 0.5% | Dec 9, 2022 | Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to chan... |
| CVE-2022-44213 | MEDIUM | 4.8 | 0.4% | Dec 9, 2022 | ZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-4377 | MEDIUM | 5.4 | 0.4% | Dec 9, 2022 | A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerabili... |
| CVE-2022-33187 | MEDIUM | 4.9 | 0.5% | Dec 9, 2022 | Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow ... |
| CVE-2022-38765 | MEDIUM | 6.5 | 0.5% | Dec 9, 2022 | Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is a... |
| CVE-2022-41947 | MEDIUM | 5.4 | 0.4% | Dec 8, 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Throu... |
| CVE-2022-46158 | MEDIUM | 4.3 | 0.5% | Dec 8, 2022 | PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem ac... |
| CVE-2022-46153 | MEDIUM | 6.5 | 0.5% | Dec 8, 2022 | Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability ... |
| CVE-2022-41949 | MEDIUM | 4.3 | 0.4% | Dec 8, 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. In af... |
| CVE-2022-23494 | MEDIUM | 6.1 | 0.9% | Dec 8, 2022 | tinymce is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in the alert and c... |
| CVE-2022-23469 | MEDIUM | 6.5 | 1.0% | Dec 8, 2022 | Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulne... |
| CVE-2022-41717 | MEDIUM | 5.3 | 5.6% | Dec 8, 2022 | An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contai... |
| CVE-2022-46831 | MEDIUM | 4.9 | 0.4% | Dec 8, 2022 | In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allo... |
| CVE-2022-46830 | MEDIUM | 5.3 | 0.5% | Dec 8, 2022 | In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning. |
| CVE-2022-46827 | MEDIUM | 5.5 | 0.2% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was po... |
| CVE-2022-46826 | MEDIUM | 5.5 | 0.2% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a pa... |
| CVE-2022-40939 | MEDIUM | 4.9 | 0.4% | Dec 8, 2022 | In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B201711... |
| CVE-2022-38599 | MEDIUM | 6.5 | 0.8% | Dec 8, 2022 | Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now