2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-48427 | MEDIUM | 5.4 | 1.0% | Mar 27, 2023 | In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible |
| CVE-2022-48429 | MEDIUM | 5.4 | 0.6% | Mar 27, 2023 | In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible |
| CVE-2022-48426 | MEDIUM | 5.4 | 1.1% | Mar 27, 2023 | In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible |
| CVE-2022-47146 | MEDIUM | 6.1 | 0.4% | Mar 27, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 version... |
| CVE-2022-47925 | HIGH | 7.5 | 0.9% | Mar 27, 2023 | The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected... |
| CVE-2022-47924 | MEDIUM | 6.5 | 0.3% | Mar 27, 2023 | An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally insta... |
| CVE-2022-46843 | MEDIUM | 6.1 | 0.4% | Mar 27, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin <= 2.0.4 v... |
| CVE-2022-41354 | MEDIUM | 4.3 | 0.8% | Mar 27, 2023 | An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications... |
| CVE-2022-30705 | HIGH | 8.8 | 0.2% | Mar 27, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Pankaj Jha WordPress Ping Optimizer plugin <= 2.35.1.2.3 versions. |
| CVE-2022-32199 | MEDIUM | 6.5 | 1.7% | Mar 27, 2023 | db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traver... |
| CVE-2022-4126 | CRITICAL | 9.8 | 0.6% | Mar 27, 2023 | Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and P... |
| CVE-2022-39043 | LOW | 2.4 | 0.3% | Mar 27, 2023 | Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physica... |
| CVE-2022-45597 | CRITICAL | 9.8 | 0.7% | Mar 24, 2023 | ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. NOTE: the vendor does not consider this a vulnerability b... |
| CVE-2022-42528 | MEDIUM | 5.5 | 0.1% | Mar 24, 2023 | In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local infor... |
| CVE-2022-42500 | MEDIUM | 6.7 | 0.1% | Mar 24, 2023 | In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could l... |
| CVE-2022-42499 | CRITICAL | 9.8 | 0.5% | Mar 24, 2023 | In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. T... |
| CVE-2022-42498 | CRITICAL | 9.8 | 0.5% | Mar 24, 2023 | In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to re... |
| CVE-2022-40208 | MEDIUM | 4.3 | 0.6% | Mar 24, 2023 | In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigat... |
| CVE-2022-20542 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead ... |
| CVE-2022-20532 | CRITICAL | 9.8 | 0.5% | Mar 24, 2023 | In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. Thi... |
| CVE-2022-20499 | MEDIUM | 5.5 | 0.2% | Mar 24, 2023 | In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to loca... |
| CVE-2022-20467 | MEDIUM | 5.5 | 0.1% | Mar 24, 2023 | In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. Th... |
| CVE-2022-47502 | HIGH | 7.8 | 1.0% | Mar 24, 2023 | Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes ar... |
| CVE-2022-38745 | HIGH | 7.8 | 0.9% | Mar 24, 2023 | Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead t... |
| CVE-2022-42948 | CRITICAL | 9.8 | 2.7% | Mar 24, 2023 | Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now