2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-20146MEDIUM5.5In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This co...
CVE-2022-20143MEDIUM5.5In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion...
CVE-2022-2087MEDIUM4.8A vulnerability, which was classified as problematic, was found in SourceCodester Bank Management System 1.0. This affec...
CVE-2022-20132MEDIUM4.6In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to imp...
CVE-2022-20129MEDIUM5.5In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phon...
CVE-2022-20125MEDIUM6.8In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local...
CVE-2022-1958MEDIUM6.5A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTF...
CVE-2022-32243MEDIUM5.5When a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from untrusted sources in SAP 3D V...
CVE-2022-32242MEDIUM5.5When a user opens manipulated Radiance Picture (.hdr, hdr.x3d) files received from untrusted sources in SAP 3D Visual En...
CVE-2022-32241MEDIUM5.5When a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from untrusted sources in SAP ...
CVE-2022-32240MEDIUM5.5When a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from untrusted sources in SAP 3D Vi...
CVE-2022-31066MEDIUM4.4EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prio...
CVE-2022-31060MEDIUM5.3Discourse is an open-source discussion platform. Prior to version 2.8.4 in the `stable` branch and version `2.9.0.beta5`...
CVE-2022-31049MEDIUM5.4TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitt...
CVE-2022-31048MEDIUM5.4TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11,...
CVE-2022-31047MEDIUM6.5TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29,...
CVE-2022-31046MEDIUM4.3TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29,...
CVE-2022-32239MEDIUM5.5When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterpri...
CVE-2022-32238MEDIUM5.5When a user opens manipulated Encapsulated Post Script (.eps, ai.x3d) files received from untrusted sources in SAP 3D Vi...
CVE-2022-32237MEDIUM5.5When a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from untrusted sources in SA...
CVE-2022-32236MEDIUM5.5When a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) files received from untrusted sources in SAP 3D Visual Enter...
CVE-2022-31059MEDIUM5.4Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and...
CVE-2022-32235MEDIUM5.5When a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted sources in SAP 3D Visua...
CVE-2022-31594MEDIUM6.7A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system.
CVE-2022-31589MEDIUM6.5Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now