2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34000 | MEDIUM | 6.5 | 0.8% | Jun 19, 2022 | libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline/low_memory_render_pipeline.c... |
| CVE-2022-23071 | MEDIUM | 6.5 | 0.9% | Jun 19, 2022 | In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” fu... |
| CVE-2022-33987 | MEDIUM | 5.3 | 1.9% | Jun 18, 2022 | The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket. |
| CVE-2022-21503 | MEDIUM | 4.9 | 0.8% | Jun 17, 2022 | Vulnerability in the Oracle Cloud Infrastructure product of Oracle Cloud Services. Easily exploitable vulnerability allo... |
| CVE-2022-31876 | MEDIUM | 5.3 | 1.2% | Jun 17, 2022 | netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can le... |
| CVE-2022-31875 | MEDIUM | 6.1 | 0.7% | Jun 17, 2022 | Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/schepro... |
| CVE-2022-31873 | MEDIUM | 6.1 | 0.7% | Jun 17, 2022 | Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.... |
| CVE-2022-25872 | MEDIUM | 5.3 | 1.0% | Jun 17, 2022 | All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and leng... |
| CVE-2022-21184 | MEDIUM | 5.9 | 0.4% | Jun 17, 2022 | An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise... |
| CVE-2022-32444 | MEDIUM | 6.1 | 2.2% | Jun 17, 2022 | An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser t... |
| CVE-2022-32442 | MEDIUM | 6.1 | 0.7% | Jun 17, 2022 | u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS). When a user accesses the default home page if the param... |
| CVE-2022-30607 | MEDIUM | 6.5 | 0.7% | Jun 17, 2022 | IBM Robotic Process Automation 20.10.0, 20.12.5, 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow a ... |
| CVE-2022-31246 | MEDIUM | 5.5 | 0.7% | Jun 17, 2022 | paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR... |
| CVE-2022-2113 | MEDIUM | 5.4 | 0.7% | Jun 17, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.7.2. |
| CVE-2022-30328 | MEDIUM | 6.5 | 0.4% | Jun 16, 2022 | An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interfa... |
| CVE-2022-30327 | MEDIUM | 6.5 | 0.5% | Jun 16, 2022 | An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacke... |
| CVE-2022-30326 | MEDIUM | 5.4 | 0.5% | Jun 16, 2022 | An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interfa... |
| CVE-2022-33755 | MEDIUM | 5.3 | 0.9% | Jun 16, 2022 | CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could all... |
| CVE-2022-31299 | MEDIUM | 6.1 | 4.7% | Jun 16, 2022 | Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form. |
| CVE-2022-27512 | MEDIUM | 5.3 | 0.9% | Jun 16, 2022 | Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued o... |
| CVE-2022-31301 | MEDIUM | 5.4 | 0.8% | Jun 16, 2022 | Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component. |
| CVE-2022-31294 | MEDIUM | 6.5 | 0.8% | Jun 16, 2022 | An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily ... |
| CVE-2022-2085 | MEDIUM | 5.5 | 1.4% | Jun 16, 2022 | A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number o... |
| CVE-2022-31298 | MEDIUM | 5.4 | 1.1% | Jun 16, 2022 | A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web ... |
| CVE-2022-31914 | MEDIUM | 5.4 | 0.5% | Jun 16, 2022 | Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now