2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32746 | MEDIUM | 5.4 | 1.1% | Aug 25, 2022 | A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values fre... |
| CVE-2022-32742 | MEDIUM | 4.3 | 1.0% | Aug 25, 2022 | A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enoug... |
| CVE-2022-2991 | MEDIUM | 6.7 | 0.4% | Aug 25, 2022 | A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of prop... |
| CVE-2022-23715 | MEDIUM | 6.5 | 0.7% | Aug 25, 2022 | A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwo... |
| CVE-2022-23235 | MEDIUM | 5.3 | 0.5% | Aug 25, 2022 | Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a... |
| CVE-2022-37162 | MEDIUM | 5.4 | 0.6% | Aug 25, 2022 | Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution... |
| CVE-2022-37161 | MEDIUM | 6.1 | 0.5% | Aug 25, 2022 | Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload. |
| CVE-2022-37160 | MEDIUM | 5.4 | 0.5% | Aug 25, 2022 | Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privil... |
| CVE-2022-37292 | MEDIUM | 5.5 | 0.3% | Aug 25, 2022 | Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub_42FDE4 function, whic... |
| CVE-2022-37238 | MEDIUM | 5.4 | 0.5% | Aug 25, 2022 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the current... |
| CVE-2022-37245 | MEDIUM | 5.4 | 0.5% | Aug 25, 2022 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blackli... |
| CVE-2022-37244 | MEDIUM | 5.4 | 0.5% | Aug 25, 2022 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest par... |
| CVE-2022-37243 | MEDIUM | 5.4 | 0.5% | Aug 25, 2022 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whiteli... |
| CVE-2022-37241 | MEDIUM | 5.4 | 0.5% | Aug 25, 2022 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_le... |
| CVE-2022-37239 | MEDIUM | 5.4 | 0.5% | Aug 25, 2022 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_... |
| CVE-2022-32857 | MEDIUM | 4.3 | 0.2% | Aug 24, 2022 | This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey... |
| CVE-2022-32838 | MEDIUM | 5.5 | 0.5% | Aug 24, 2022 | A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11... |
| CVE-2022-32834 | MEDIUM | 5.5 | 0.5% | Aug 24, 2022 | An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.5, macOS Big Su... |
| CVE-2022-34837 | MEDIUM | 6.1 | 0.1% | Aug 24, 2022 | Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit th... |
| CVE-2022-2569 | MEDIUM | 5.5 | 0.1% | Aug 24, 2022 | The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session d... |
| CVE-2022-37153 | MEDIUM | 6.1 | 1.4% | Aug 24, 2022 | An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.logi... |
| CVE-2022-33172 | MEDIUM | 5.5 | 0.2% | Aug 24, 2022 | de.fac2 1.34 allows bypassing the User Presence protection mechanism when there is malware on the victim's PC. |
| CVE-2022-38089 | MEDIUM | 5.4 | 0.8% | Aug 24, 2022 | Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-ad... |
| CVE-2022-38080 | MEDIUM | 5.4 | 0.8% | Aug 24, 2022 | Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel... |
| CVE-2022-37418 | MEDIUM | 6.4 | 0.9% | Aug 24, 2022 | The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote at... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now