2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25238 | MEDIUM | 5.4 | 0.6% | Jun 28, 2022 | Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website co... |
| CVE-2022-24444 | MEDIUM | 6.5 | 0.8% | Jun 28, 2022 | Silverstripe silverstripe/framework through 4.10 allows Session Fixation. |
| CVE-2022-31886 | MEDIUM | 6.5 | 2.1% | Jun 28, 2022 | Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending... |
| CVE-2022-2231 | MEDIUM | 5.5 | 1.2% | Jun 28, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-31229 | MEDIUM | 4.9 | 0.7% | Jun 28, 2022 | Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information. An administrator coul... |
| CVE-2022-31108 | MEDIUM | 6.1 | 0.8% | Jun 28, 2022 | Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer ... |
| CVE-2022-31068 | MEDIUM | 5.3 | 0.9% | Jun 28, 2022 | GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an... |
| CVE-2022-31052 | MEDIUM | 6.5 | 1.6% | Jun 28, 2022 | Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previe... |
| CVE-2022-0085 | MEDIUM | 5.3 | 1.0% | Jun 28, 2022 | Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0. |
| CVE-2022-30562 | MEDIUM | 4.7 | 0.7% | Jun 28, 2022 | If the user enables the https function on the device, an attacker can modify the user’s request data packet through a ma... |
| CVE-2022-30561 | MEDIUM | 5.9 | 0.7% | Jun 28, 2022 | When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker coul... |
| CVE-2022-23896 | MEDIUM | 5.4 | 0.5% | Jun 28, 2022 | Admidio 4.1.2 version is affected by stored cross-site scripting (XSS). |
| CVE-2022-34133 | MEDIUM | 6.1 | 0.5% | Jun 28, 2022 | Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Comment parameter at applicatio... |
| CVE-2022-31104 | MEDIUM | 5.6 | 1.6% | Jun 28, 2022 | Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal fo... |
| CVE-2022-33009 | MEDIUM | 4.8 | 0.6% | Jun 27, 2022 | A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts ... |
| CVE-2022-31099 | MEDIUM | 6.5 | 0.9% | Jun 27, 2022 | rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, the stack may overflow,... |
| CVE-2022-31100 | MEDIUM | 6.5 | 0.8% | Jun 27, 2022 | rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possib... |
| CVE-2022-31096 | MEDIUM | 5.7 | 0.5% | Jun 27, 2022 | Discourse is an open source discussion platform. Under certain conditions, a logged in user can redeem an invite with an... |
| CVE-2022-33116 | MEDIUM | 6.5 | 1.6% | Jun 27, 2022 | An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka openeclass) v3.12.4 and... |
| CVE-2022-33005 | MEDIUM | 6.1 | 0.6% | Jun 27, 2022 | A cross-site scripting (XSS) vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1... |
| CVE-2022-31094 | MEDIUM | 6.1 | 0.8% | Jun 27, 2022 | ScratchTools is a web extension designed to make interacting with the Scratch programming language community (Scratching... |
| CVE-2022-31088 | MEDIUM | 5.3 | 1.2% | Jun 27, 2022 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d... |
| CVE-2022-31085 | MEDIUM | 6.1 | 0.3% | Jun 27, 2022 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d... |
| CVE-2022-31081 | MEDIUM | 6.5 | 2.1% | Jun 27, 2022 | HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which ... |
| CVE-2022-31077 | MEDIUM | 5.7 | 0.8% | Jun 27, 2022 | KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to ho... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now