2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34258 | MEDIUM | 4.8 | 68.3% | Aug 16, 2022 | Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored ... |
| CVE-2022-34257 | MEDIUM | 6.1 | 0.9% | Aug 16, 2022 | Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored ... |
| CVE-2022-2846 | MEDIUM | 4.3 | 2.2% | Aug 16, 2022 | The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place wh... |
| CVE-2022-2844 | MEDIUM | 6.1 | 0.4% | Aug 16, 2022 | A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This af... |
| CVE-2022-2843 | MEDIUM | 6.1 | 0.5% | Aug 16, 2022 | A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this ... |
| CVE-2022-38189 | MEDIUM | 5.4 | 0.5% | Aug 16, 2022 | A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS may allow a remote, authenticated attacker t... |
| CVE-2022-30576 | MEDIUM | 5.4 | 0.4% | Aug 16, 2022 | The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - ... |
| CVE-2022-30575 | MEDIUM | 5.4 | 0.5% | Aug 16, 2022 | The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - ... |
| CVE-2022-38194 | MEDIUM | 5.5 | 0.1% | Aug 16, 2022 | In Esri Portal for ArcGIS versions 10.8.1, a system property is not properly encrypted. This may lead to a local user re... |
| CVE-2022-38192 | MEDIUM | 5.4 | 0.5% | Aug 16, 2022 | A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS may allow a remote, authenticated attacker t... |
| CVE-2022-36530 | MEDIUM | 6.1 | 0.7% | Aug 16, 2022 | An issue was discovered in rageframe2 2.6.37. There is a XSS vulnerability in the user agent related parameters of the i... |
| CVE-2022-29959 | MEDIUM | 5.5 | 0.3% | Aug 16, 2022 | Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave a... |
| CVE-2022-2838 | MEDIUM | 5.3 | 0.5% | Aug 16, 2022 | In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced e... |
| CVE-2022-34156 | MEDIUM | 4.8 | 0.2% | Aug 16, 2022 | 'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker ... |
| CVE-2022-36311 | MEDIUM | 6.1 | 0.4% | Aug 16, 2022 | Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP c... |
| CVE-2022-36307 | MEDIUM | 6.8 | 0.3% | Aug 16, 2022 | The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in Air... |
| CVE-2022-36306 | MEDIUM | 6.5 | 0.8% | Aug 16, 2022 | An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS pri... |
| CVE-2022-24952 | MEDIUM | 6.5 | 1.3% | Aug 16, 2022 | Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered re... |
| CVE-2022-38358 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cro... |
| CVE-2022-38191 | MEDIUM | 5.4 | 0.5% | Aug 15, 2022 | There is an HTML injection issue in Esri Portal for ArcGIS versions 10.9.0 and below which may allow a remote, authentic... |
| CVE-2022-38190 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS configurable apps may allow a remote, unauth... |
| CVE-2022-38188 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 which may allow a remote attacker able ... |
| CVE-2022-38186 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which may allow a remote atta... |
| CVE-2022-24654 | MEDIUM | 5.4 | 1.1% | Aug 15, 2022 | Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmw... |
| CVE-2022-2824 | MEDIUM | 5.4 | 0.6% | Aug 15, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now