2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36385 | MEDIUM | 6.8 | 0.4% | Sep 13, 2022 | A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resu... |
| CVE-2022-1602 | MEDIUM | 5.5 | 0.2% | Sep 13, 2022 | A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerabilit... |
| CVE-2022-3175 | MEDIUM | 5.3 | 0.7% | Sep 13, 2022 | Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2. |
| CVE-2022-39158 | MEDIUM | 5.3 | 1.2% | Sep 13, 2022 | A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i80... |
| CVE-2022-37302 | MEDIUM | 5.5 | 0.2% | Sep 13, 2022 | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause... |
| CVE-2022-38299 | MEDIUM | 4.3 | 0.5% | Sep 12, 2022 | An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP int... |
| CVE-2022-38295 | MEDIUM | 6.1 | 1.0% | Sep 12, 2022 | Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. Thi... |
| CVE-2022-38291 | MEDIUM | 6.1 | 0.4% | Sep 12, 2022 | SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via ... |
| CVE-2022-38135 | MEDIUM | 4.3 | 0.5% | Sep 12, 2022 | Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with s... |
| CVE-2022-39200 | MEDIUM | 5.3 | 0.3% | Sep 12, 2022 | Dendrite is a Matrix homeserver written in Go. In affected versions events retrieved from a remote homeserver using the ... |
| CVE-2022-36101 | MEDIUM | 5.3 | 0.5% | Sep 12, 2022 | Shopware is an open source e-commerce software. In affected versions the request for the customer detail view in the bac... |
| CVE-2022-31225 | MEDIUM | 5.1 | 0.2% | Sep 12, 2022 | Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could poten... |
| CVE-2022-31222 | MEDIUM | 4.4 | 0.2% | Sep 12, 2022 | Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated a... |
| CVE-2022-31220 | MEDIUM | 5.1 | 0.2% | Sep 12, 2022 | Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could poten... |
| CVE-2022-36254 | MEDIUM | 5.4 | 0.6% | Sep 12, 2022 | Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel Management System 1.0 all... |
| CVE-2022-34110 | MEDIUM | 5.5 | 0.3% | Sep 12, 2022 | An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to download arbitrary files r... |
| CVE-2022-38972 | MEDIUM | 6.1 | 0.7% | Sep 12, 2022 | Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and... |
| CVE-2022-37796 | MEDIUM | 5.4 | 0.4% | Sep 12, 2022 | In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable t... |
| CVE-2022-40325 | MEDIUM | 6.1 | 0.4% | Sep 11, 2022 | SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262. |
| CVE-2022-40324 | MEDIUM | 6.1 | 0.4% | Sep 11, 2022 | SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258. |
| CVE-2022-40323 | MEDIUM | 6.1 | 0.4% | Sep 11, 2022 | SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241. |
| CVE-2022-40322 | MEDIUM | 6.1 | 0.4% | Sep 11, 2022 | SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579. |
| CVE-2022-25295 | MEDIUM | 5.4 | 0.5% | Sep 11, 2022 | This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next qu... |
| CVE-2022-38266 | MEDIUM | 6.5 | 1.4% | Sep 9, 2022 | An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial... |
| CVE-2022-36087 | MEDIUM | 6.5 | 1.3% | Sep 9, 2022 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now