2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-30330 | MEDIUM | 6.6 | 0.5% | May 7, 2022 | In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security res... |
| CVE-2022-29422 | MEDIUM | 4.8 | 0.5% | May 6, 2022 | Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock ... |
| CVE-2022-27909 | MEDIUM | 4.3 | 0.8% | May 6, 2022 | In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see th... |
| CVE-2022-29421 | MEDIUM | 6.1 | 0.7% | May 6, 2022 | Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type v... |
| CVE-2022-29420 | MEDIUM | 4.8 | 0.4% | May 6, 2022 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Skaat ... |
| CVE-2022-28545 | MEDIUM | 5.4 | 0.4% | May 6, 2022 | FUDforum 3.1.1 is vulnerable to Stored XSS. |
| CVE-2022-28507 | MEDIUM | 4.8 | 0.5% | May 6, 2022 | Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting (XSS) ... |
| CVE-2022-27183 | MEDIUM | 6.1 | 0.6% | May 6, 2022 | The Monitoring Console app configured in Distributed mode allows for a Reflected XSS in a query parameter in Splunk Ente... |
| CVE-2022-26070 | MEDIUM | 4.3 | 0.6% | May 6, 2022 | When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, ... |
| CVE-2022-28164 | MEDIUM | 6.5 | 0.3% | May 6, 2022 | Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passw... |
| CVE-2022-24823 | MEDIUM | 5.5 | 1.0% | May 6, 2022 | Netty is an open-source, asynchronous event-driven network application framework. The package `io.netty:netty-codec-http... |
| CVE-2022-30295 | MEDIUM | 6.5 | 11.3% | May 6, 2022 | uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache pois... |
| CVE-2022-24878 | MEDIUM | 6.5 | 0.9% | May 6, 2022 | Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller v... |
| CVE-2022-24902 | MEDIUM | 4.3 | 0.5% | May 6, 2022 | TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideo... |
| CVE-2022-24899 | MEDIUM | 6.1 | 3.7% | May 6, 2022 | Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In v... |
| CVE-2022-29172 | MEDIUM | 6.1 | 0.6% | May 5, 2022 | Auth0 is an authentication broker that supports both social and enterprise identity providers, including Active Director... |
| CVE-2022-27359 | MEDIUM | 5.5 | 1.0% | May 5, 2022 | Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference. |
| CVE-2022-27337 | MEDIUM | 6.5 | 1.5% | May 5, 2022 | A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a... |
| CVE-2022-26073 | MEDIUM | 6.5 | 0.7% | May 5, 2022 | A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.... |
| CVE-2022-29480 | MEDIUM | 5.3 | 0.8% | May 5, 2022 | On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are con... |
| CVE-2022-29479 | MEDIUM | 5.3 | 0.8% | May 5, 2022 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and ... |
| CVE-2022-29474 | MEDIUM | 4.3 | 1.4% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13... |
| CVE-2022-28859 | MEDIUM | 6.5 | 0.7% | May 5, 2022 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scrip... |
| CVE-2022-28708 | MEDIUM | 5.9 | 0.7% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled... |
| CVE-2022-28707 | MEDIUM | 5.4 | 0.6% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now