2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1637 | MEDIUM | 4.3 | 0.7% | Jul 26, 2022 | Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak c... |
| CVE-2022-1501 | MEDIUM | 6.5 | 0.7% | Jul 26, 2022 | Inappropriate implementation in iframe in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-o... |
| CVE-2022-1500 | MEDIUM | 6.5 | 0.6% | Jul 26, 2022 | Insufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass co... |
| CVE-2022-1499 | MEDIUM | 6.3 | 0.6% | Jul 26, 2022 | Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to b... |
| CVE-2022-1498 | MEDIUM | 4.3 | 0.7% | Jul 26, 2022 | Inappropriate implementation in HTML Parser in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cr... |
| CVE-2022-1497 | MEDIUM | 6.5 | 0.4% | Jul 26, 2022 | Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the con... |
| CVE-2022-1495 | MEDIUM | 4.3 | 0.6% | Jul 26, 2022 | Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof... |
| CVE-2022-1494 | MEDIUM | 6.1 | 0.7% | Jul 26, 2022 | Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypas... |
| CVE-2022-1492 | MEDIUM | 6.1 | 0.7% | Jul 26, 2022 | Insufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to injec... |
| CVE-2022-1488 | MEDIUM | 4.3 | 0.5% | Jul 26, 2022 | Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced... |
| CVE-2022-1482 | MEDIUM | 6.5 | 0.7% | Jul 26, 2022 | Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially e... |
| CVE-2022-22412 | MEDIUM | 4.6 | 0.3% | Jul 26, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client machi... |
| CVE-2022-34991 | MEDIUM | 5.4 | 0.4% | Jul 26, 2022 | Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name... |
| CVE-2022-34988 | MEDIUM | 5.4 | 0.5% | Jul 26, 2022 | Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the compon... |
| CVE-2022-30706 | MEDIUM | 6.1 | 0.5% | Jul 26, 2022 | Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user ... |
| CVE-2022-34575 | MEDIUM | 5.7 | 0.6% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key info... |
| CVE-2022-34574 | MEDIUM | 5.7 | 0.6% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key info... |
| CVE-2022-34573 | MEDIUM | 6.3 | 0.6% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configu... |
| CVE-2022-34572 | MEDIUM | 5.7 | 0.6% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet p... |
| CVE-2022-22999 | MEDIUM | 4.8 | 0.3% | Jul 25, 2022 | Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user ... |
| CVE-2022-35288 | MEDIUM | 6.5 | 0.6% | Jul 25, 2022 | IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in fu... |
| CVE-2022-34962 | MEDIUM | 5.4 | 0.9% | Jul 25, 2022 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu... |
| CVE-2022-2059 | MEDIUM | 4.8 | 0.4% | Jul 25, 2022 | In Pandora FMS v7.0NG.761 and below, in the agent creation section, the alias parameter is vulnerable to a Stored Cross ... |
| CVE-2022-2032 | MEDIUM | 4.8 | 0.4% | Jul 25, 2022 | In Pandora FMS v7.0NG.761 and below, in the file manager section, the dirname parameter is vulnerable to a Stored Cross ... |
| CVE-2022-35653 | MEDIUM | 6.1 | 3.7% | Jul 25, 2022 | A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitizat... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now