2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42484 | CRITICAL | 9.8 | 6.0% | Jan 30, 2023 | An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially... |
| CVE-2022-38451 | HIGH | 7.5 | 2.1% | Jan 30, 2023 | A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially craf... |
| CVE-2022-2988 | HIGH | 7.5 | 0.4% | Jan 30, 2023 | A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a mali... |
| CVE-2022-46359 | HIGH | 8.8 | 0.2% | Jan 30, 2023 | Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary... |
| CVE-2022-46358 | HIGH | 8.8 | 0.2% | Jan 30, 2023 | Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary... |
| CVE-2022-46357 | HIGH | 8.8 | 0.2% | Jan 30, 2023 | Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary... |
| CVE-2022-46356 | HIGH | 8.8 | 0.2% | Jan 30, 2023 | Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary... |
| CVE-2022-25967 | HIGH | 8.8 | 2.0% | Jan 30, 2023 | Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine co... |
| CVE-2022-25936 | HIGH | 7.5 | 1.3% | Jan 30, 2023 | Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of the fi... |
| CVE-2022-48303 | MEDIUM | 5.5 | 1.5% | Jan 30, 2023 | GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jum... |
| CVE-2022-27596 | CRITICAL | 9.8 | 2.7% | Jan 30, 2023 | A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows ... |
| CVE-2022-48285 | HIGH | 7.3 | 1.4% | Jan 29, 2023 | loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive. |
| CVE-2022-39324 | LOW | 3.5 | 0.8% | Jan 27, 2023 | Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user ... |
| CVE-2022-23552 | MEDIUM | 5.4 | 0.8% | Jan 27, 2023 | Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions ... |
| CVE-2022-4255 | MEDIUM | 5.3 | 0.5% | Jan 27, 2023 | An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6... |
| CVE-2022-4205 | HIGH | 7.5 | 0.6% | Jan 27, 2023 | In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash. |
| CVE-2022-4201 | MEDIUM | 5.3 | 0.5% | Jan 27, 2023 | A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 all... |
| CVE-2022-46968 | MEDIUM | 5.4 | 0.5% | Jan 27, 2023 | A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attac... |
| CVE-2022-43980 | MEDIUM | 5.4 | 0.3% | Jan 27, 2023 | There is a stored cross-site scripting vulnerability in Pandora FMS v765 in the network maps editing functionality. An a... |
| CVE-2022-43979 | CRITICAL | 9.8 | 0.8% | Jan 27, 2023 | There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that t... |
| CVE-2022-43978 | LOW | 3.7 | 0.3% | Jan 27, 2023 | There is an improper authentication vulnerability in Pandora FMS v764. The application verifies that the user has a vali... |
| CVE-2022-39813 | MEDIUM | 6.1 | 0.5% | Jan 27, 2023 | Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/j_security_check via ... |
| CVE-2022-39812 | HIGH | 7.5 | 1.0% | Jan 27, 2023 | Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. An unauthentica... |
| CVE-2022-39811 | CRITICAL | 9.1 | 0.8% | Jan 27, 2023 | Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGu... |
| CVE-2022-48108 | CRITICAL | 9.8 | 3.1% | Jan 27, 2023 | D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettin... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now