2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36355 | MEDIUM | 5.4 | 0.4% | Sep 1, 2022 | Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <... |
| CVE-2022-28199 | MEDIUM | 6.5 | 1.8% | Sep 1, 2022 | NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where... |
| CVE-2022-38790 | MEDIUM | 5.4 | 0.6% | Sep 1, 2022 | Weave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a malicious user to inject a jav... |
| CVE-2022-36055 | MEDIUM | 6.5 | 0.8% | Sep 1, 2022 | Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided b... |
| CVE-2022-3072 | MEDIUM | 5.4 | 0.7% | Sep 1, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3. |
| CVE-2022-36449 | MEDIUM | 6.5 | 0.9% | Sep 1, 2022 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operat... |
| CVE-2022-36203 | MEDIUM | 6.1 | 0.7% | Aug 31, 2022 | Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. In addition, it leads t... |
| CVE-2022-2898 | MEDIUM | 5.5 | 0.2% | Aug 31, 2022 | Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow... |
| CVE-2022-36048 | MEDIUM | 4.3 | 0.5% | Aug 31, 2022 | Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. When displaying... |
| CVE-2022-1841 | MEDIUM | 5.3 | 0.5% | Aug 31, 2022 | In subsys/net/ip/tcp.c , function tcp_flags , when the incoming parameter flags is ECN or CWR , the buf will out-of-boun... |
| CVE-2022-36046 | MEDIUM | 5.3 | 1.0% | Aug 31, 2022 | Next.js is a React framework that can provide building blocks to create web applications. All of the following must be t... |
| CVE-2022-38812 | MEDIUM | 6.5 | 2.1% | Aug 31, 2022 | AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter. |
| CVE-2022-38153 | MEDIUM | 5.9 | 1.7% | Aug 31, 2022 | An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is e... |
| CVE-2022-37183 | MEDIUM | 6.1 | 0.6% | Aug 31, 2022 | Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list. |
| CVE-2022-2758 | MEDIUM | 5.9 | 0.3% | Aug 31, 2022 | Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (L... |
| CVE-2022-2521 | MEDIUM | 6.5 | 0.9% | Aug 31, 2022 | It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 calle... |
| CVE-2022-2520 | MEDIUM | 6.5 | 0.9% | Aug 31, 2022 | A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can c... |
| CVE-2022-2519 | MEDIUM | 6.5 | 0.9% | Aug 31, 2022 | There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1 |
| CVE-2022-2153 | MEDIUM | 5.5 | 0.5% | Aug 31, 2022 | A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbeh... |
| CVE-2022-28625 | MEDIUM | 5.5 | 0.2% | Aug 31, 2022 | A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60... |
| CVE-2022-26331 | MEDIUM | 6.1 | 0.4% | Aug 31, 2022 | Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exp... |
| CVE-2022-1975 | MEDIUM | 5.5 | 0.2% | Aug 31, 2022 | There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a n... |
| CVE-2022-1974 | MEDIUM | 4.1 | 0.1% | Aug 31, 2022 | A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject cre... |
| CVE-2022-1508 | MEDIUM | 6.1 | 0.2% | Aug 31, 2022 | An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() func... |
| CVE-2022-1355 | MEDIUM | 6.1 | 0.5% | Aug 31, 2022 | A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now