2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-30863 | MEDIUM | 4.8 | 0.5% | Jun 6, 2022 | FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Pan... |
| CVE-2022-30861 | MEDIUM | 4.8 | 0.5% | Jun 6, 2022 | FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature. |
| CVE-2022-29784 | MEDIUM | 5.3 | 1.1% | Jun 3, 2022 | PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirec... |
| CVE-2022-29773 | MEDIUM | 6.5 | 0.7% | Jun 3, 2022 | An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and be... |
| CVE-2022-29770 | MEDIUM | 5.4 | 0.5% | Jun 3, 2022 | XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo. |
| CVE-2022-1988 | MEDIUM | 6.1 | 0.7% | Jun 3, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09. |
| CVE-2022-32265 | MEDIUM | 5.3 | 1.2% | Jun 3, 2022 | qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding. |
| CVE-2022-29767 | MEDIUM | 6.5 | 0.9% | Jun 3, 2022 | adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a ... |
| CVE-2022-30233 | MEDIUM | 6.5 | 0.7% | Jun 2, 2022 | A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated when... |
| CVE-2022-31461 | MEDIUM | 6.5 | 0.8% | Jun 2, 2022 | Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 messag... |
| CVE-2022-31459 | MEDIUM | 6.5 | 0.8% | Jun 2, 2022 | Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth. |
| CVE-2022-29718 | MEDIUM | 6.1 | 1.0% | Jun 2, 2022 | Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this ... |
| CVE-2022-29085 | MEDIUM | 6.7 | 0.2% | Jun 2, 2022 | Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulne... |
| CVE-2022-26866 | MEDIUM | 5.5 | 0.4% | Jun 2, 2022 | Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged networ... |
| CVE-2022-31024 | MEDIUM | 6.5 | 0.6% | Jun 2, 2022 | richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.... |
| CVE-2022-30429 | MEDIUM | 5.4 | 0.6% | Jun 2, 2022 | Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject... |
| CVE-2022-29597 | MEDIUM | 6.5 | 1.9% | Jun 2, 2022 | Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local File Inclusion (LFI). Any authenticated... |
| CVE-2022-26944 | MEDIUM | 6.5 | 0.9% | Jun 2, 2022 | Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include ... |
| CVE-2022-26497 | MEDIUM | 5.4 | 0.8% | Jun 2, 2022 | BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The pa... |
| CVE-2022-1982 | MEDIUM | 6.5 | 0.8% | Jun 2, 2022 | Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the ... |
| CVE-2022-1980 | MEDIUM | 4.8 | 0.6% | Jun 2, 2022 | A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue aff... |
| CVE-2022-1979 | MEDIUM | 4.8 | 0.6% | Jun 2, 2022 | A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulner... |
| CVE-2022-1716 | MEDIUM | 4.6 | 0.4% | Jun 2, 2022 | Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's passw... |
| CVE-2022-32202 | MEDIUM | 5.5 | 0.7% | Jun 2, 2022 | In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp. |
| CVE-2022-32201 | MEDIUM | 5.5 | 0.7% | Jun 2, 2022 | In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now