2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2885 | MEDIUM | 4.8 | 0.4% | Aug 21, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-35692 | MEDIUM | 5.3 | 0.7% | Aug 19, 2022 | Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improp... |
| CVE-2022-35554 | MEDIUM | 6.1 | 0.6% | Aug 19, 2022 | Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an at... |
| CVE-2022-2790 | MEDIUM | 5.9 | 0.1% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryp... |
| CVE-2022-2789 | MEDIUM | 5.5 | 0.1% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of ... |
| CVE-2022-36233 | MEDIUM | 5.5 | 0.3% | Aug 19, 2022 | Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd. |
| CVE-2022-36031 | MEDIUM | 6.5 | 0.8% | Aug 19, 2022 | Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by... |
| CVE-2022-36008 | MEDIUM | 6.5 | 0.9% | Aug 19, 2022 | Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC resul... |
| CVE-2022-0542 | MEDIUM | 6.1 | 0.8% | Aug 19, 2022 | Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0. |
| CVE-2022-37254 | MEDIUM | 5.4 | 0.4% | Aug 19, 2022 | DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configura... |
| CVE-2022-34624 | MEDIUM | 5.9 | 0.7% | Aug 19, 2022 | Mealie1.0.0beta3 does not terminate download tokens after a user logs out, allowing attackers to perform a man-in-the-mi... |
| CVE-2022-34621 | MEDIUM | 6.5 | 0.7% | Aug 19, 2022 | Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attack... |
| CVE-2022-35910 | MEDIUM | 5.4 | 0.7% | Aug 19, 2022 | In Jellyfin before 10.8, stored XSS allows theft of an admin access token. |
| CVE-2022-1021 | MEDIUM | 5.4 | 0.6% | Aug 19, 2022 | Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0. |
| CVE-2022-1901 | MEDIUM | 5.3 | 0.5% | Aug 19, 2022 | In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview. |
| CVE-2022-34345 | MEDIUM | 6.2 | 0.3% | Aug 18, 2022 | Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged... |
| CVE-2022-30944 | MEDIUM | 5.5 | 0.2% | Aug 18, 2022 | Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to... |
| CVE-2022-28697 | MEDIUM | 6.8 | 0.4% | Aug 18, 2022 | Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated us... |
| CVE-2022-37770 | MEDIUM | 6.5 | 0.6% | Aug 18, 2022 | libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.c... |
| CVE-2022-37769 | MEDIUM | 6.5 | 0.6% | Aug 18, 2022 | libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. Thi... |
| CVE-2022-35213 | MEDIUM | 6.1 | 0.5% | Aug 18, 2022 | Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a cross-site scripting (XSS) vulnerabilit... |
| CVE-2022-35212 | MEDIUM | 6.1 | 0.5% | Aug 18, 2022 | osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db... |
| CVE-2022-2568 | MEDIUM | 6.5 | 0.8% | Aug 18, 2022 | A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user w... |
| CVE-2022-29507 | MEDIUM | 5.5 | 0.2% | Aug 18, 2022 | Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authentic... |
| CVE-2022-28709 | MEDIUM | 4.4 | 0.2% | Aug 18, 2022 | Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a p... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now