2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34750 | HIGH | 7.5 | 1.2% | Jun 28, 2022 | An issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is currently capped at a thou... |
| CVE-2022-30997 | HIGH | 7.2 | 1.4% | Jun 28, 2022 | Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which ma... |
| CVE-2022-30707 | HIGH | 8.8 | 0.6% | Jun 28, 2022 | Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CE... |
| CVE-2022-29519 | HIGH | 7.5 | 0.4% | Jun 28, 2022 | Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 ... |
| CVE-2022-0624 | HIGH | 7.3 | 0.9% | Jun 28, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0. |
| CVE-2022-34134 | HIGH | 8.8 | 0.4% | Jun 28, 2022 | Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /application/controllers/Use... |
| CVE-2022-31103 | HIGH | 7.5 | 1.4% | Jun 27, 2022 | lettersanitizer is a DOM-based HTML email sanitizer for in-browser email rendering. All versions of lettersanitizer belo... |
| CVE-2022-31101 | HIGH | 8.8 | 24.1% | Jun 27, 2022 | prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected v... |
| CVE-2022-33007 | HIGH | 8.8 | 0.8% | Jun 27, 2022 | TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function ... |
| CVE-2022-31098 | HIGH | 7.5 | 1.1% | Jun 27, 2022 | Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing K... |
| CVE-2022-31093 | HIGH | 7.5 | 1.6% | Jun 27, 2022 | NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker... |
| CVE-2022-31092 | HIGH | 8.1 | 1.3% | Jun 27, 2022 | Pimcore is an Open Source Data & Experience Management Platform. Pimcore offers developers listing classes to make query... |
| CVE-2022-31091 | HIGH | 7.7 | 1.4% | Jun 27, 2022 | Guzzle, an extensible PHP HTTP client. `Authorization` and `Cookie` headers on requests are sensitive information. In af... |
| CVE-2022-31090 | HIGH | 7.7 | 1.8% | Jun 27, 2022 | Guzzle, an extensible PHP HTTP client. `Authorization` headers on requests are sensitive information. In affected versio... |
| CVE-2022-31089 | HIGH | 7.5 | 1.1% | Jun 27, 2022 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected vers... |
| CVE-2022-31087 | HIGH | 7.8 | 0.4% | Jun 27, 2022 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d... |
| CVE-2022-31086 | HIGH | 8.8 | 2.2% | Jun 27, 2022 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d... |
| CVE-2022-31084 | HIGH | 8.1 | 2.3% | Jun 27, 2022 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d... |
| CVE-2022-31034 | HIGH | 8.1 | 0.9% | Jun 27, 2022 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 ... |
| CVE-2022-28622 | HIGH | 7.5 | 0.7% | Jun 27, 2022 | A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key excha... |
| CVE-2022-28168 | HIGH | 7.5 | 0.9% | Jun 27, 2022 | In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored usin... |
| CVE-2022-28166 | HIGH | 7.5 | 0.5% | Jun 27, 2022 | In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Sup... |
| CVE-2022-26477 | HIGH | 7.5 | 2.0% | Jun 27, 2022 | The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable va... |
| CVE-2022-2210 | HIGH | 7.8 | 1.4% | Jun 27, 2022 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2207 | HIGH | 7.8 | 1.4% | Jun 27, 2022 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now