2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40408 | MEDIUM | 5.4 | 0.4% | Sep 29, 2022 | FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into... |
| CVE-2022-40363 | MEDIUM | 5.5 | 0.3% | Sep 29, 2022 | A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 a... |
| CVE-2022-3355 | MEDIUM | 5.4 | 0.6% | Sep 29, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.8.3. |
| CVE-2022-1725 | MEDIUM | 5.5 | 0.5% | Sep 29, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. |
| CVE-2022-1719 | MEDIUM | 5.4 | 0.7% | Sep 29, 2022 | Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capab... |
| CVE-2022-35888 | MEDIUM | 6.5 | 0.6% | Sep 29, 2022 | Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel... |
| CVE-2022-3326 | MEDIUM | 4.3 | 0.5% | Sep 29, 2022 | Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9. |
| CVE-2022-31629 | MEDIUM | 6.5 | 49.3% | Sep 28, 2022 | In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a sta... |
| CVE-2022-31628 | MEDIUM | 5.5 | 0.6% | Sep 28, 2022 | In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip ... |
| CVE-2022-39264 | MEDIUM | 5.9 | 0.6% | Sep 28, 2022 | nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers... |
| CVE-2022-3292 | MEDIUM | 4.6 | 0.5% | Sep 28, 2022 | Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| CVE-2022-29089 | MEDIUM | 4.9 | 0.5% | Sep 28, 2022 | Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclos... |
| CVE-2022-3287 | MEDIUM | 6.5 | 0.6% | Sep 28, 2022 | When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/re... |
| CVE-2022-39246 | MEDIUM | 5.3 | 0.6% | Sep 28, 2022 | matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious home... |
| CVE-2022-36781 | MEDIUM | 5.3 | 0.5% | Sep 28, 2022 | ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom acce... |
| CVE-2022-23716 | MEDIUM | 5.3 | 0.5% | Sep 28, 2022 | A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the... |
| CVE-2022-3193 | MEDIUM | 6.1 | 0.4% | Sep 28, 2022 | An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine. A parameter "error_d... |
| CVE-2022-39236 | MEDIUM | 5.3 | 1.0% | Sep 28, 2022 | Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly form... |
| CVE-2022-36771 | MEDIUM | 6.5 | 0.5% | Sep 28, 2022 | IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they shou... |
| CVE-2022-35722 | MEDIUM | 5.4 | 0.4% | Sep 28, 2022 | IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2022-35282 | MEDIUM | 6.5 | 0.3% | Sep 28, 2022 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending ... |
| CVE-2022-22387 | MEDIUM | 5.4 | 0.4% | Sep 28, 2022 | IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc... |
| CVE-2022-40912 | MEDIUM | 6.1 | 0.5% | Sep 28, 2022 | ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). Input passed to... |
| CVE-2022-28816 | MEDIUM | 6.1 | 0.4% | Sep 28, 2022 | In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy is prone to refl... |
| CVE-2022-3349 | MEDIUM | 6.8 | 0.5% | Sep 28, 2022 | A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readu... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now