2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32531 | MEDIUM | 5.9 | 1.0% | Dec 15, 2022 | The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server... |
| CVE-2022-2536 | MEDIUM | 5.3 | 1.4% | Dec 15, 2022 | The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticate... |
| CVE-2022-23526 | HIGH | 7.5 | 0.8% | Dec 15, 2022 | Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Po... |
| CVE-2022-23525 | HIGH | 7.5 | 0.8% | Dec 15, 2022 | Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Po... |
| CVE-2022-23524 | HIGH | 7.5 | 0.8% | Dec 15, 2022 | Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontr... |
| CVE-2022-23507 | MEDIUM | 6.5 | 0.3% | Dec 15, 2022 | Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior t... |
| CVE-2022-23474 | MEDIUM | 6.1 | 0.5% | Dec 15, 2022 | Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via ... |
| CVE-2022-22063 | HIGH | 7.8 | 0.3% | Dec 15, 2022 | Memory corruption in Core due to improper configuration in boot remapper. |
| CVE-2022-32763 | MEDIUM | 6.1 | 1.1% | Dec 15, 2022 | A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper la... |
| CVE-2022-32573 | HIGH | 8.8 | 3.7% | Dec 15, 2022 | A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1... |
| CVE-2022-29517 | HIGH | 8.8 | 60.2% | Dec 15, 2022 | A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweep... |
| CVE-2022-29511 | MEDIUM | 6.5 | 2.5% | Dec 15, 2022 | A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweep... |
| CVE-2022-28703 | MEDIUM | 5.4 | 1.1% | Dec 15, 2022 | A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansw... |
| CVE-2022-27498 | MEDIUM | 6.5 | 38.3% | Dec 15, 2022 | A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lans... |
| CVE-2022-46768 | MEDIUM | 5.9 | 47.8% | Dec 15, 2022 | Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The s... |
| CVE-2022-4506 | HIGH | 8.8 | 1.1% | Dec 15, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2. |
| CVE-2022-4505 | MEDIUM | 4.3 | 0.7% | Dec 15, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2. |
| CVE-2022-4504 | HIGH | 7.5 | 0.9% | Dec 15, 2022 | Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2. |
| CVE-2022-4503 | MEDIUM | 6.1 | 0.6% | Dec 15, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2. |
| CVE-2022-4502 | MEDIUM | 6.1 | 0.6% | Dec 15, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2. |
| CVE-2022-4410 | MEDIUM | 5.4 | 0.6% | Dec 14, 2022 | The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and incl... |
| CVE-2022-3917 | MEDIUM | 5.5 | 0.2% | Dec 14, 2022 | Improper access control of bootloader function was discovered in Motorola Mobility Motorola e20 prior to version RONS31.... |
| CVE-2022-4501 | MEDIUM | 6.5 | 0.7% | Dec 14, 2022 | The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_s... |
| CVE-2022-4283 | HIGH | 7.8 | 1.0% | Dec 14, 2022 | A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer ... |
| CVE-2022-47411 | HIGH | 7.5 | 0.7% | Dec 14, 2022 | An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x b... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now