2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22370 | MEDIUM | 5.4 | 0.4% | Jul 8, 2022 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting. This vulner... |
| CVE-2022-34306 | MEDIUM | 5.4 | 0.6% | Jul 8, 2022 | IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by... |
| CVE-2022-34167 | MEDIUM | 5.4 | 0.5% | Jul 8, 2022 | IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to ... |
| CVE-2022-34166 | MEDIUM | 5.4 | 0.5% | Jul 8, 2022 | IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2022-34160 | MEDIUM | 5.4 | 0.9% | Jul 8, 2022 | IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co... |
| CVE-2022-35406 | MEDIUM | 4.3 | 0.6% | Jul 8, 2022 | A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or... |
| CVE-2022-28624 | MEDIUM | 4.8 | 0.4% | Jul 8, 2022 | A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vu... |
| CVE-2022-32115 | MEDIUM | 6.1 | 1.0% | Jul 8, 2022 | An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG... |
| CVE-2022-31290 | MEDIUM | 5.4 | 0.7% | Jul 8, 2022 | A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrar... |
| CVE-2022-30852 | MEDIUM | 4.3 | 0.7% | Jul 8, 2022 | Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR). |
| CVE-2022-32061 | MEDIUM | 4.8 | 0.5% | Jul 7, 2022 | An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 al... |
| CVE-2022-32060 | MEDIUM | 4.8 | 0.9% | Jul 7, 2022 | An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to ... |
| CVE-2022-31029 | MEDIUM | 4.8 | 0.4% | Jul 7, 2022 | AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `<script>alert("XS... |
| CVE-2022-33098 | MEDIUM | 6.1 | 52.2% | Jul 7, 2022 | Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function.... |
| CVE-2022-28889 | MEDIUM | 4.3 | 1.6% | Jul 7, 2022 | In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and... |
| CVE-2022-31136 | MEDIUM | 6.1 | 0.5% | Jul 7, 2022 | Bookwyrm is an open source social reading and reviewing program. Versions of Bookwyrm prior to 0.4.1 did not properly sa... |
| CVE-2022-31133 | MEDIUM | 4.8 | 0.6% | Jul 7, 2022 | HumHub is an Open Source Enterprise Social Network. Affected versions of HumHub are vulnerable to a stored Cross-Site Sc... |
| CVE-2022-32441 | MEDIUM | 5.5 | 0.6% | Jul 7, 2022 | A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service (DoS) via a crafted file. Rel... |
| CVE-2022-32208 | MEDIUM | 5.9 | 7.5% | Jul 7, 2022 | When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes... |
| CVE-2022-32206 | MEDIUM | 6.5 | 33.1% | Jul 7, 2022 | curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple t... |
| CVE-2022-32205 | MEDIUM | 4.3 | 27.9% | Jul 7, 2022 | A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 sto... |
| CVE-2022-34007 | MEDIUM | 6.1 | 1.2% | Jul 7, 2022 | EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry. |
| CVE-2022-25047 | MEDIUM | 5.9 | 1.5% | Jul 7, 2022 | The password reset token in CWP v0.9.8.1126 is generated using known or predictable values. |
| CVE-2022-32567 | MEDIUM | 5.4 | 0.5% | Jul 7, 2022 | The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add... |
| CVE-2022-2342 | MEDIUM | 5.4 | 0.6% | Jul 7, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to v0.64.4. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now