2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39207 | MEDIUM | 5.4 | 0.7% | Sep 13, 2022 | Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. During CI/CD builds, it is possible to save buil... |
| CVE-2022-38006 | MEDIUM | 6.5 | 1.8% | Sep 13, 2022 | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2022-37959 | MEDIUM | 6.5 | 1.8% | Sep 13, 2022 | Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability |
| CVE-2022-35837 | MEDIUM | 6.5 | 2.0% | Sep 13, 2022 | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2022-35832 | MEDIUM | 5.5 | 0.9% | Sep 13, 2022 | Windows Event Tracing Denial of Service Vulnerability |
| CVE-2022-35831 | MEDIUM | 5.5 | 0.7% | Sep 13, 2022 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
| CVE-2022-34728 | MEDIUM | 5.5 | 3.7% | Sep 13, 2022 | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2022-34723 | MEDIUM | 5.5 | 1.0% | Sep 13, 2022 | Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability |
| CVE-2022-39202 | MEDIUM | 6.3 | 0.7% | Sep 13, 2022 | matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. The Internet Relay Chat (IRC) protocol allows you... |
| CVE-2022-36108 | MEDIUM | 6.1 | 0.7% | Sep 13, 2022 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that ... |
| CVE-2022-36107 | MEDIUM | 5.4 | 0.7% | Sep 13, 2022 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that ... |
| CVE-2022-36106 | MEDIUM | 5.4 | 0.7% | Sep 13, 2022 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that ... |
| CVE-2022-36105 | MEDIUM | 5.3 | 1.0% | Sep 13, 2022 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that ... |
| CVE-2022-36020 | MEDIUM | 6.1 | 0.6% | Sep 13, 2022 | The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explic... |
| CVE-2022-39799 | MEDIUM | 6.1 | 0.4% | Sep 13, 2022 | An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpa... |
| CVE-2022-39014 | MEDIUM | 5.3 | 0.4% | Sep 13, 2022 | Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 4... |
| CVE-2022-35298 | MEDIUM | 6.1 | 0.4% | Sep 13, 2022 | SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in ... |
| CVE-2022-35295 | MEDIUM | 4.9 | 1.2% | Sep 13, 2022 | In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for th... |
| CVE-2022-35294 | MEDIUM | 5.4 | 0.4% | Sep 13, 2022 | An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Ser... |
| CVE-2022-3190 | MEDIUM | 5.5 | 1.7% | Sep 13, 2022 | Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denia... |
| CVE-2022-3027 | MEDIUM | 5.7 | 0.3% | Sep 13, 2022 | The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could... |
| CVE-2022-38453 | MEDIUM | 4.4 | 0.2% | Sep 13, 2022 | Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation se... |
| CVE-2022-38069 | MEDIUM | 6.1 | 0.3% | Sep 13, 2022 | Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with mom... |
| CVE-2022-36780 | MEDIUM | 5.3 | 0.4% | Sep 13, 2022 | Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the reco... |
| CVE-2022-36778 | MEDIUM | 5.4 | 0.4% | Sep 13, 2022 | insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now