2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1730 | MEDIUM | 4.6 | 0.6% | May 19, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4. |
| CVE-2022-29230 | MEDIUM | 5.4 | 0.7% | May 18, 2022 | Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross... |
| CVE-2022-1774 | MEDIUM | 6.1 | 1.1% | May 18, 2022 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7. |
| CVE-2022-30992 | MEDIUM | 6.1 | 0.5% | May 18, 2022 | Open redirect via user-controlled query parameter. The following products are affected: Acronis Cyber Protect 15 (Linux,... |
| CVE-2022-30991 | MEDIUM | 6.1 | 0.5% | May 18, 2022 | HTML injection via report name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before bu... |
| CVE-2022-1771 | MEDIUM | 5.5 | 1.2% | May 18, 2022 | Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975. |
| CVE-2022-30598 | MEDIUM | 4.3 | 1.0% | May 18, 2022 | A flaw was found in moodle where global search results could include author information on some activities where a user ... |
| CVE-2022-30597 | MEDIUM | 5.3 | 1.2% | May 18, 2022 | A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field. |
| CVE-2022-30111 | MEDIUM | 6.8 | 0.3% | May 18, 2022 | Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism... |
| CVE-2022-28921 | MEDIUM | 6.5 | 0.7% | May 18, 2022 | A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers... |
| CVE-2022-25617 | MEDIUM | 6.1 | 0.8% | May 18, 2022 | Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerabl... |
| CVE-2022-30596 | MEDIUM | 5.4 | 0.8% | May 18, 2022 | A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sa... |
| CVE-2022-28924 | MEDIUM | 6.5 | 0.9% | May 18, 2022 | An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive informa... |
| CVE-2022-25162 | MEDIUM | 5.3 | 2.4% | May 18, 2022 | Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,... |
| CVE-2022-22777 | MEDIUM | 6.1 | 0.6% | May 18, 2022 | The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exp... |
| CVE-2022-22776 | MEDIUM | 5.4 | 0.5% | May 18, 2022 | The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exp... |
| CVE-2022-1110 | MEDIUM | 5.5 | 0.2% | May 18, 2022 | A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to... |
| CVE-2022-28717 | MEDIUM | 4.8 | 0.5% | May 18, 2022 | Cross-site scripting vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware versions, WATCH BOOT l... |
| CVE-2022-1782 | MEDIUM | 6.1 | 0.9% | May 18, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11. |
| CVE-2022-23068 | MEDIUM | 5.4 | 0.6% | May 18, 2022 | ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside t... |
| CVE-2022-1432 | MEDIUM | 6.4 | 1.2% | May 18, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. |
| CVE-2022-29646 | MEDIUM | 5.3 | 0.8% | May 18, 2022 | An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtai... |
| CVE-2022-30975 | MEDIUM | 5.5 | 1.1% | May 18, 2022 | In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp. |
| CVE-2022-30974 | MEDIUM | 5.5 | 1.1% | May 18, 2022 | compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a differe... |
| CVE-2022-30045 | MEDIUM | 6.5 | 0.9% | May 17, 2022 | An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling whi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now