2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3097 | MEDIUM | 6.5 | 0.3% | Oct 25, 2022 | The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible f... |
| CVE-2022-39837 | MEDIUM | 5.5 | 0.4% | Oct 25, 2022 | An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT fi... |
| CVE-2022-39836 | MEDIUM | 5.5 | 0.4% | Oct 25, 2022 | An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT fi... |
| CVE-2022-39351 | MEDIUM | 4.4 | 0.2% | Oct 25, 2022 | Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software ... |
| CVE-2022-39350 | MEDIUM | 5.4 | 0.7% | Oct 25, 2022 | @dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis... |
| CVE-2022-39349 | MEDIUM | 5.5 | 0.3% | Oct 25, 2022 | The Tasks.org Android app is an open-source app for to-do lists and reminders. The Tasks.org app uses the activity `Shar... |
| CVE-2022-39340 | MEDIUM | 5.3 | 0.7% | Oct 25, 2022 | OpenFGA is an authorization/permission engine. Prior to version 0.2.4, the `streamed-list-objects` endpoint was not vali... |
| CVE-2022-39315 | MEDIUM | 5.3 | 0.6% | Oct 25, 2022 | Kirby is a Content Management System. Prior to versions 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, a user enumeration vulnera... |
| CVE-2022-38200 | MEDIUM | 6.1 | 0.3% | Oct 25, 2022 | A cross site scripting vulnerability exists in some map service configurations of ArcGIS Server versions 10.8.1 and 10.7... |
| CVE-2022-38199 | MEDIUM | 6.1 | 0.3% | Oct 25, 2022 | A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cas... |
| CVE-2022-38198 | MEDIUM | 6.1 | 0.5% | Oct 25, 2022 | There is a reflected cross site scripting issue in the Esri ArcGIS Server services directory versions 10.9.1 and below t... |
| CVE-2022-38197 | MEDIUM | 6.1 | 0.5% | Oct 25, 2022 | Esri ArcGIS Server versions 10.9.1 and below have an unvalidated redirect issue that may allow a remote, unauthenticated... |
| CVE-2022-38195 | MEDIUM | 6.1 | 0.4% | Oct 25, 2022 | There is as reflected cross site scripting issue in Esri ArcGIS Server versions 10.9.1 and below which may allow a remot... |
| CVE-2022-36783 | MEDIUM | 5.4 | 0.4% | Oct 25, 2022 | AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter calle... |
| CVE-2022-35739 | MEDIUM | 5.3 | 0.7% | Oct 25, 2022 | PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to in... |
| CVE-2022-34870 | MEDIUM | 5.4 | 1.1% | Oct 25, 2022 | Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse we... |
| CVE-2022-33757 | MEDIUM | 6.5 | 0.8% | Oct 25, 2022 | An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privil... |
| CVE-2022-32574 | MEDIUM | 6.5 | 1.5% | Oct 25, 2022 | A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. i... |
| CVE-2022-2762 | MEDIUM | 6.5 | 0.3% | Oct 25, 2022 | The AdminPad WordPress plugin before 2.2 does not have CSRF check when updating admin's note, allowing attackers to make... |
| CVE-2022-27622 | MEDIUM | 4.3 | 0.7% | Oct 25, 2022 | Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) b... |
| CVE-2022-43677 | MEDIUM | 5.5 | 0.7% | Oct 24, 2022 | In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.G... |
| CVE-2022-41799 | MEDIUM | 6.5 | 0.8% | Oct 24, 2022 | Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) all... |
| CVE-2022-41797 | MEDIUM | 6.5 | 0.9% | Oct 24, 2022 | Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 ... |
| CVE-2022-40690 | MEDIUM | 5.4 | 0.7% | Oct 24, 2022 | Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to injec... |
| CVE-2022-3676 | MEDIUM | 6.5 | 0.6% | Oct 24, 2022 | In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now