2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29627 | MEDIUM | 4.3 | 0.5% | Jun 2, 2022 | An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are... |
| CVE-2022-29598 | MEDIUM | 6.1 | 0.8% | Jun 2, 2022 | Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an reflected Cross-Site Scripting (XSS) vulne... |
| CVE-2022-29540 | MEDIUM | 6.1 | 0.7% | Jun 2, 2022 | resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject ar... |
| CVE-2022-28702 | MEDIUM | 5.5 | 0.3% | Jun 2, 2022 | Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with... |
| CVE-2022-27779 | MEDIUM | 5.3 | 2.7% | Jun 2, 2022 | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.cu... |
| CVE-2022-27776 | MEDIUM | 6.5 | 4.0% | Jun 2, 2022 | A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header ... |
| CVE-2022-27774 | MEDIUM | 5.7 | 1.9% | Jun 2, 2022 | An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that co... |
| CVE-2022-26978 | MEDIUM | 6.1 | 0.5% | Jun 2, 2022 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checkl... |
| CVE-2022-26977 | MEDIUM | 6.1 | 0.5% | Jun 2, 2022 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil... |
| CVE-2022-26976 | MEDIUM | 5.4 | 0.4% | Jun 2, 2022 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil... |
| CVE-2022-26974 | MEDIUM | 6.1 | 0.5% | Jun 2, 2022 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload... |
| CVE-2022-26973 | MEDIUM | 5.3 | 0.7% | Jun 2, 2022 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil... |
| CVE-2022-26972 | MEDIUM | 6.1 | 0.5% | Jun 2, 2022 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bi... |
| CVE-2022-26971 | MEDIUM | 5.3 | 0.7% | Jun 2, 2022 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil... |
| CVE-2022-26491 | MEDIUM | 5.9 | 2.4% | Jun 2, 2022 | An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client con... |
| CVE-2022-24967 | MEDIUM | 5.4 | 0.6% | Jun 2, 2022 | Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS). |
| CVE-2022-24238 | MEDIUM | 6.1 | 0.7% | Jun 2, 2022 | ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 par... |
| CVE-2022-23237 | MEDIUM | 6.1 | 0.6% | Jun 2, 2022 | E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks... |
| CVE-2022-23236 | MEDIUM | 4.4 | 0.2% | Jun 2, 2022 | E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext with... |
| CVE-2022-1789 | MEDIUM | 6.8 | 0.3% | Jun 2, 2022 | With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed wit... |
| CVE-2022-1462 | MEDIUM | 6.3 | 0.3% | Jun 2, 2022 | An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a... |
| CVE-2022-29236 | MEDIUM | 4.3 | 0.8% | Jun 2, 2022 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc... |
| CVE-2022-29235 | MEDIUM | 5.3 | 1.0% | Jun 2, 2022 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc... |
| CVE-2022-29234 | MEDIUM | 4.3 | 0.8% | Jun 2, 2022 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4.1,... |
| CVE-2022-29233 | MEDIUM | 4.3 | 1.0% | Jun 2, 2022 | BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now