2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22496 | MEDIUM | 6.5 | 0.4% | Jun 30, 2022 | While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be config... |
| CVE-2022-22494 | MEDIUM | 5.3 | 1.3% | Jun 30, 2022 | IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the dat... |
| CVE-2022-22478 | MEDIUM | 5.5 | 0.2% | Jun 30, 2022 | IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a ... |
| CVE-2022-2058 | MEDIUM | 6.5 | 1.0% | Jun 30, 2022 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file.... |
| CVE-2022-2057 | MEDIUM | 6.5 | 1.0% | Jun 30, 2022 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file.... |
| CVE-2022-2056 | MEDIUM | 6.5 | 1.0% | Jun 30, 2022 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file.... |
| CVE-2022-1955 | MEDIUM | 4.6 | 0.4% | Jun 30, 2022 | Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin l... |
| CVE-2022-33043 | MEDIUM | 5.4 | 0.5% | Jun 30, 2022 | A cross-site scripting (XSS) vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers t... |
| CVE-2022-2078 | MEDIUM | 5.5 | 1.0% | Jun 30, 2022 | A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to tr... |
| CVE-2022-1852 | MEDIUM | 5.5 | 0.3% | Jun 30, 2022 | A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the... |
| CVE-2022-26135 | MEDIUM | 6.5 | 71.2% | Jun 30, 2022 | A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user w... |
| CVE-2022-30467 | MEDIUM | 6.8 | 0.8% | Jun 29, 2022 | Joy ebike Wolf Manufacturing year 2022 is vulnerable to Denial of service, which allows remote attackers to jam the key ... |
| CVE-2022-31063 | MEDIUM | 5.4 | 0.5% | Jun 29, 2022 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior... |
| CVE-2022-31032 | MEDIUM | 4.3 | 0.7% | Jun 29, 2022 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior... |
| CVE-2022-2252 | MEDIUM | 6.1 | 0.8% | Jun 29, 2022 | Open Redirect in GitHub repository microweber/microweber prior to 1.2.19. |
| CVE-2022-32969 | MEDIUM | 5.9 | 1.2% | Jun 29, 2022 | MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used... |
| CVE-2022-31897 | MEDIUM | 6.1 | 0.9% | Jun 29, 2022 | SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?ms... |
| CVE-2022-31266 | MEDIUM | 4.3 | 0.7% | Jun 29, 2022 | In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers... |
| CVE-2022-29272 | MEDIUM | 6.1 | 3.3% | Jun 29, 2022 | In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing. |
| CVE-2022-29271 | MEDIUM | 6.5 | 1.5% | Jun 29, 2022 | In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime ... |
| CVE-2022-29270 | MEDIUM | 4.3 | 1.9% | Jun 29, 2022 | In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address. |
| CVE-2022-29269 | MEDIUM | 6.5 | 2.4% | Jun 29, 2022 | In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that ... |
| CVE-2022-28803 | MEDIUM | 5.4 | 0.5% | Jun 29, 2022 | In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR... |
| CVE-2022-31884 | MEDIUM | 6.5 | 1.1% | Jun 28, 2022 | Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other... |
| CVE-2022-29858 | MEDIUM | 4.3 | 1.2% | Jun 28, 2022 | Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to b... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now