2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40307 | MEDIUM | 4.7 | 0.2% | Sep 9, 2022 | An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition w... |
| CVE-2022-36097 | MEDIUM | 6.1 | 57.4% | Sep 8, 2022 | XWiki Platform Attachment UI provides a macro to easily upload and select attachments for XWiki Platform, a generic wiki... |
| CVE-2022-36095 | MEDIUM | 4.3 | 0.3% | Sep 8, 2022 | XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3, it is possible to perform a Cross-Site Re... |
| CVE-2022-38256 | MEDIUM | 5.4 | 0.4% | Sep 8, 2022 | TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execu... |
| CVE-2022-27969 | MEDIUM | 5.3 | 0.6% | Sep 8, 2022 | Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET req... |
| CVE-2022-27968 | MEDIUM | 5.3 | 0.6% | Sep 8, 2022 | Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via ... |
| CVE-2022-27967 | MEDIUM | 5.3 | 0.6% | Sep 8, 2022 | Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a... |
| CVE-2022-3153 | MEDIUM | 5.5 | 0.5% | Sep 8, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. |
| CVE-2022-36736 | MEDIUM | 6.1 | 0.6% | Sep 8, 2022 | Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking... |
| CVE-2022-20863 | MEDIUM | 5.3 | 0.8% | Sep 8, 2022 | A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, rem... |
| CVE-2022-3148 | MEDIUM | 6.1 | 0.5% | Sep 8, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0. |
| CVE-2022-3138 | MEDIUM | 6.1 | 0.5% | Sep 8, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0. |
| CVE-2022-38400 | MEDIUM | 5.9 | 1.2% | Sep 8, 2022 | Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use... |
| CVE-2022-38399 | MEDIUM | 6.8 | 0.3% | Sep 8, 2022 | Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-... |
| CVE-2022-37146 | MEDIUM | 5.3 | 0.7% | Sep 8, 2022 | The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login a... |
| CVE-2022-36088 | MEDIUM | 5.5 | 0.2% | Sep 7, 2022 | GoCD is a continuous delivery server. Windows installations via either the server or agent installers for GoCD prior to ... |
| CVE-2022-38254 | MEDIUM | 6.1 | 1.7% | Sep 7, 2022 | Nagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the ajax.php script in ... |
| CVE-2022-38251 | MEDIUM | 4.8 | 1.7% | Sep 7, 2022 | Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Performance Setting... |
| CVE-2022-38249 | MEDIUM | 6.1 | 1.7% | Sep 7, 2022 | Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1... |
| CVE-2022-38248 | MEDIUM | 6.1 | 1.7% | Sep 7, 2022 | Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at auditlog.php. |
| CVE-2022-38247 | MEDIUM | 4.8 | 1.7% | Sep 7, 2022 | Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Settings page under... |
| CVE-2022-36083 | MEDIUM | 5.3 | 1.1% | Sep 7, 2022 | JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto ... |
| CVE-2022-36082 | MEDIUM | 5.3 | 0.6% | Sep 7, 2022 | mangadex-downloader is a command-line tool to download manga from MangaDex. When using `file:<location>` command and `<l... |
| CVE-2022-36080 | MEDIUM | 6.1 | 0.4% | Sep 7, 2022 | Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, an attacker could capture user's session cookies ... |
| CVE-2022-30312 | MEDIUM | 6.5 | 0.2% | Sep 7, 2022 | The Trend Controls IC protocol through 2022-05-06 allows Cleartext Transmission of Sensitive Information. According to F... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now