2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23165 | MEDIUM | 6.1 | 0.4% | May 12, 2022 | Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS) - The parameter "helpPageName" used by the page "/help/treec... |
| CVE-2022-22971 | MEDIUM | 6.5 | 3.2% | May 12, 2022 | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebS... |
| CVE-2022-22970 | MEDIUM | 5.3 | 2.0% | May 12, 2022 | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uplo... |
| CVE-2022-22797 | MEDIUM | 6.1 | 0.5% | May 12, 2022 | Sysaid – sysaid Open Redirect - An Attacker can change the redirect link at the parameter "redirectURL" from"GET" reques... |
| CVE-2022-28818 | MEDIUM | 6.1 | 41.2% | May 12, 2022 | ColdFusion versions CF2021U3 (and earlier) and CF2018U13 are affected by a reflected Cross-Site Scripting (XSS) vulnerab... |
| CVE-2022-26510 | MEDIUM | 6.5 | 1.2% | May 12, 2022 | A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37... |
| CVE-2022-26020 | MEDIUM | 6.5 | 0.6% | May 12, 2022 | An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRou... |
| CVE-2022-25172 | MEDIUM | 6.1 | 0.9% | May 12, 2022 | An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRo... |
| CVE-2022-24910 | MEDIUM | 6.7 | 1.3% | May 12, 2022 | A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V... |
| CVE-2022-24382 | MEDIUM | 6.7 | 0.2% | May 12, 2022 | Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalatio... |
| CVE-2022-24297 | MEDIUM | 6.7 | 0.2% | May 12, 2022 | Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala... |
| CVE-2022-21238 | MEDIUM | 6.1 | 1.4% | May 12, 2022 | A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A... |
| CVE-2022-21237 | MEDIUM | 6.7 | 0.2% | May 12, 2022 | Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation o... |
| CVE-2022-21151 | MEDIUM | 5.5 | 0.3% | May 12, 2022 | Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authe... |
| CVE-2022-21147 | MEDIUM | 5.5 | 0.6% | May 12, 2022 | An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-craft... |
| CVE-2022-21136 | MEDIUM | 5.5 | 0.3% | May 12, 2022 | Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial ... |
| CVE-2022-21131 | MEDIUM | 5.5 | 0.3% | May 12, 2022 | Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable infor... |
| CVE-2022-0004 | MEDIUM | 6.8 | 0.3% | May 12, 2022 | Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Bo... |
| CVE-2022-29302 | MEDIUM | 5.5 | 0.3% | May 12, 2022 | SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php. |
| CVE-2022-28920 | MEDIUM | 4.8 | 0.6% | May 12, 2022 | Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting (XSS) vulnerability via the function strip_tags. |
| CVE-2022-28919 | MEDIUM | 6.1 | 1.4% | May 12, 2022 | HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the funct... |
| CVE-2022-29538 | MEDIUM | 5.3 | 0.8% | May 12, 2022 | RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic. An unauthenticated user is able t... |
| CVE-2022-28873 | MEDIUM | 4.3 | 0.5% | May 12, 2022 | A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.op... |
| CVE-2022-1674 | MEDIUM | 5.5 | 1.5% | May 12, 2022 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938.... |
| CVE-2022-29930 | MEDIUM | 4.9 | 0.8% | May 12, 2022 | SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now