2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-35134 | MEDIUM | 5.4 | 0.4% | Oct 13, 2022 | Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability. |
| CVE-2022-34021 | MEDIUM | 5.4 | 0.4% | Oct 13, 2022 | Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 ... |
| CVE-2022-42159 | MEDIUM | 4.3 | 0.6% | Oct 13, 2022 | D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator. |
| CVE-2022-3493 | MEDIUM | 5.4 | 0.3% | Oct 13, 2022 | A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System ... |
| CVE-2022-41474 | MEDIUM | 6.5 | 0.3% | Oct 13, 2022 | RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change ... |
| CVE-2022-41473 | MEDIUM | 6.1 | 1.0% | Oct 13, 2022 | RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function. |
| CVE-2022-38902 | MEDIUM | 5.4 | 0.7% | Oct 13, 2022 | A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experienc... |
| CVE-2022-35081 | MEDIUM | 5.5 | 0.3% | Oct 13, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at /src/png2swf.c. |
| CVE-2022-35080 | MEDIUM | 5.5 | 0.3% | Oct 13, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_load at /lib/png.c. |
| CVE-2022-2828 | MEDIUM | 6.5 | 0.5% | Oct 13, 2022 | In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure D... |
| CVE-2022-3473 | MEDIUM | 6.5 | 0.5% | Oct 13, 2022 | A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects a... |
| CVE-2022-3472 | MEDIUM | 4.9 | 0.5% | Oct 13, 2022 | A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by... |
| CVE-2022-3471 | MEDIUM | 4.9 | 0.5% | Oct 13, 2022 | A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected... |
| CVE-2022-3470 | MEDIUM | 6.5 | 0.5% | Oct 13, 2022 | A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affect... |
| CVE-2022-41316 | MEDIUM | 5.3 | 0.4% | Oct 12, 2022 | HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL ... |
| CVE-2022-41351 | MEDIUM | 6.1 | 0.4% | Oct 12, 2022 | In Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the... |
| CVE-2022-41350 | MEDIUM | 6.1 | 0.4% | Oct 12, 2022 | In Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a phone parameter that is v... |
| CVE-2022-41349 | MEDIUM | 6.1 | 0.4% | Oct 12, 2022 | In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to R... |
| CVE-2022-41348 | MEDIUM | 6.1 | 0.4% | Oct 12, 2022 | An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror attribute of an IMG element, le... |
| CVE-2022-33918 | MEDIUM | 5.5 | 0.1% | Oct 12, 2022 | Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user cou... |
| CVE-2022-32484 | MEDIUM | 4.4 | 0.2% | Oct 12, 2022 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privilege... |
| CVE-2022-32483 | MEDIUM | 4.4 | 0.2% | Oct 12, 2022 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privilege... |
| CVE-2022-42087 | MEDIUM | 6.5 | 0.3% | Oct 12, 2022 | Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function f... |
| CVE-2022-42086 | MEDIUM | 6.5 | 0.3% | Oct 12, 2022 | Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function T... |
| CVE-2022-42078 | MEDIUM | 6.5 | 0.3% | Oct 12, 2022 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now