2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-27549 | MEDIUM | 5.5 | 0.1% | Jul 6, 2022 | HCL Launch may store certain data for recurring activities in a plain text format. |
| CVE-2022-27548 | MEDIUM | 5.5 | 0.4% | Jul 6, 2022 | HCL Launch stores user credentials in plain clear text which can be read by a local user. |
| CVE-2022-20862 | MEDIUM | 4.3 | 1.2% | Jul 6, 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni... |
| CVE-2022-20815 | MEDIUM | 6.1 | 0.7% | Jul 6, 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie... |
| CVE-2022-20813 | MEDIUM | 5.9 | 1.0% | Jul 6, 2022 | Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TeleP... |
| CVE-2022-20812 | MEDIUM | 6.5 | 1.7% | Jul 6, 2022 | Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TeleP... |
| CVE-2022-20808 | MEDIUM | 6.5 | 0.9% | Jul 6, 2022 | A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to c... |
| CVE-2022-20800 | MEDIUM | 6.1 | 0.7% | Jul 6, 2022 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie... |
| CVE-2022-20791 | MEDIUM | 6.5 | 1.3% | Jul 6, 2022 | A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Comm... |
| CVE-2022-20768 | MEDIUM | 4.9 | 0.8% | Jul 6, 2022 | A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software could all... |
| CVE-2022-20752 | MEDIUM | 5.3 | 0.9% | Jul 6, 2022 | A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Manag... |
| CVE-2022-2318 | MEDIUM | 5.5 | 0.4% | Jul 6, 2022 | There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers ... |
| CVE-2022-2316 | MEDIUM | 5.4 | 0.5% | Jul 6, 2022 | HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the render... |
| CVE-2022-31131 | MEDIUM | 4.3 | 0.6% | Jul 6, 2022 | Nextcloud mail is a Mail app for the Nextcloud home server product. Versions of Nextcloud mail prior to 1.12.2 were foun... |
| CVE-2022-31127 | MEDIUM | 6.1 | 0.9% | Jul 6, 2022 | NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromis... |
| CVE-2022-31124 | MEDIUM | 6.5 | 1.0% | Jul 6, 2022 | openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key... |
| CVE-2022-31111 | MEDIUM | 5.3 | 1.0% | Jul 6, 2022 | Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between E... |
| CVE-2022-26348 | MEDIUM | 5.5 | 0.3% | Jul 6, 2022 | Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Wi... |
| CVE-2022-23713 | MEDIUM | 6.1 | 0.7% | Jul 6, 2022 | A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitr... |
| CVE-2022-23173 | MEDIUM | 6.3 | 0.5% | Jul 6, 2022 | this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs t... |
| CVE-2022-23172 | MEDIUM | 4.3 | 0.4% | Jul 6, 2022 | An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would... |
| CVE-2022-21787 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation... |
| CVE-2022-21786 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of priv... |
| CVE-2022-21785 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2022-21784 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now