2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2760 | MEDIUM | 4.3 | 0.4% | Sep 28, 2022 | In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have acces... |
| CVE-2022-32170 | MEDIUM | 4.3 | 0.5% | Sep 28, 2022 | The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized use... |
| CVE-2022-32169 | MEDIUM | 4.3 | 0.5% | Sep 28, 2022 | The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user ... |
| CVE-2022-32166 | MEDIUM | 6.1 | 0.5% | Sep 28, 2022 | In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minim... |
| CVE-2022-3348 | MEDIUM | 4.9 | 0.8% | Sep 28, 2022 | Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a littl... |
| CVE-2022-3333 | MEDIUM | 5.4 | 0.4% | Sep 28, 2022 | A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an un... |
| CVE-2022-39054 | MEDIUM | 6.1 | 0.5% | Sep 28, 2022 | Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthen... |
| CVE-2022-39053 | MEDIUM | 6.1 | 0.5% | Sep 28, 2022 | Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScri... |
| CVE-2022-39035 | MEDIUM | 6.1 | 0.5% | Sep 28, 2022 | Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An ... |
| CVE-2022-39034 | MEDIUM | 6.5 | 1.2% | Sep 28, 2022 | Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special ch... |
| CVE-2022-39031 | MEDIUM | 5.3 | 0.6% | Sep 28, 2022 | Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit ... |
| CVE-2022-39029 | MEDIUM | 6.5 | 0.6% | Sep 28, 2022 | Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privileg... |
| CVE-2022-38699 | MEDIUM | 5.9 | 0.3% | Sep 28, 2022 | Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A phys... |
| CVE-2022-40817 | MEDIUM | 4.3 | 0.4% | Sep 27, 2022 | Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents w... |
| CVE-2022-40816 | MEDIUM | 6.5 | 0.7% | Sep 27, 2022 | Zammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that custo... |
| CVE-2022-3303 | MEDIUM | 4.7 | 0.3% | Sep 27, 2022 | A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL poi... |
| CVE-2022-39835 | MEDIUM | 5.3 | 0.5% | Sep 27, 2022 | An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct ... |
| CVE-2022-38975 | MEDIUM | 5.4 | 0.5% | Sep 27, 2022 | DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to in... |
| CVE-2022-38335 | MEDIUM | 5.4 | 0.7% | Sep 27, 2022 | Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the e-mail template mo... |
| CVE-2022-37028 | MEDIUM | 5.4 | 0.4% | Sep 27, 2022 | ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker ... |
| CVE-2022-23006 | MEDIUM | 6.7 | 0.3% | Sep 27, 2022 | A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk i... |
| CVE-2022-30003 | MEDIUM | 5.4 | 0.5% | Sep 26, 2022 | Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register ... |
| CVE-2022-40044 | MEDIUM | 5.4 | 0.6% | Sep 26, 2022 | Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Nam... |
| CVE-2022-3201 | MEDIUM | 5.4 | 0.6% | Sep 26, 2022 | Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an ... |
| CVE-2022-3057 | MEDIUM | 6.5 | 0.5% | Sep 26, 2022 | Inappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to leak... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now