2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-35085 | MEDIUM | 5.5 | 0.3% | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c. |
| CVE-2022-35957 | MEDIUM | 6.6 | 1.3% | Sep 20, 2022 | Grafana is an open-source platform for monitoring and observability. Versions prior to 9.1.6 and 8.5.13 are vulnerable t... |
| CVE-2022-39220 | MEDIUM | 6.1 | 0.5% | Sep 20, 2022 | SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting (XSS) vulnerabilitie... |
| CVE-2022-32883 | MEDIUM | 5.5 | 0.5% | Sep 20, 2022 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS ... |
| CVE-2022-32880 | MEDIUM | 6.5 | 0.5% | Sep 20, 2022 | This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.5. An app may be able to... |
| CVE-2022-32868 | MEDIUM | 4.3 | 0.8% | Sep 20, 2022 | A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadO... |
| CVE-2022-32864 | MEDIUM | 5.5 | 0.3% | Sep 20, 2022 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 1... |
| CVE-2022-32861 | MEDIUM | 5.3 | 0.5% | Sep 20, 2022 | A logic issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. A u... |
| CVE-2022-32854 | MEDIUM | 5.5 | 0.3% | Sep 20, 2022 | This issue was addressed with improved checks. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11... |
| CVE-2022-32795 | MEDIUM | 4.3 | 0.6% | Sep 20, 2022 | This issue was addressed with improved checks. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. Visiting a malic... |
| CVE-2022-33735 | MEDIUM | 6.5 | 0.2% | Sep 20, 2022 | There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking... |
| CVE-2022-38956 | MEDIUM | 5.3 | 0.2% | Sep 20, 2022 | An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker... |
| CVE-2022-32167 | MEDIUM | 5.4 | 0.4% | Sep 20, 2022 | Cloudreve versions v1.0.0 through v3.5.3 are vulnerable to Stored Cross-Site Scripting (XSS), via the file upload functi... |
| CVE-2022-3245 | MEDIUM | 6.1 | 0.5% | Sep 20, 2022 | HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS... |
| CVE-2022-3242 | MEDIUM | 6.1 | 1.4% | Sep 20, 2022 | Code Injection in GitHub repository microweber/microweber prior to 1.3.2. |
| CVE-2022-3005 | MEDIUM | 5.4 | 0.5% | Sep 20, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-3004 | MEDIUM | 5.4 | 0.5% | Sep 20, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-3000 | MEDIUM | 5.4 | 0.5% | Sep 20, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-2924 | MEDIUM | 5.4 | 0.6% | Sep 20, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3. |
| CVE-2022-34746 | MEDIUM | 5.9 | 0.3% | Sep 20, 2022 | An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair... |
| CVE-2022-38550 | MEDIUM | 5.4 | 0.4% | Sep 19, 2022 | A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to exec... |
| CVE-2022-38527 | MEDIUM | 6.1 | 0.5% | Sep 19, 2022 | UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site ... |
| CVE-2022-38339 | MEDIUM | 6.1 | 0.5% | Sep 19, 2022 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allo... |
| CVE-2022-35070 | MEDIUM | 6.5 | 0.7% | Sep 19, 2022 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x65fc97. |
| CVE-2022-35069 | MEDIUM | 6.5 | 0.7% | Sep 19, 2022 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b544e. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now