2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29152 | MEDIUM | 6.1 | 0.5% | Apr 28, 2022 | The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the pa... |
| CVE-2022-29817 | MEDIUM | 6.1 | 0.4% | Apr 28, 2022 | In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible |
| CVE-2022-29815 | MEDIUM | 6.7 | 0.2% | Apr 28, 2022 | In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible |
| CVE-2022-29813 | MEDIUM | 6.7 | 0.2% | Apr 28, 2022 | In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible |
| CVE-2022-29811 | MEDIUM | 4.8 | 0.5% | Apr 28, 2022 | In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible. |
| CVE-2022-29869 | MEDIUM | 5.3 | 1.8% | Apr 28, 2022 | cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) charact... |
| CVE-2022-24891 | MEDIUM | 6.1 | 1.6% | Apr 27, 2022 | ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to ver... |
| CVE-2022-24736 | MEDIUM | 5.5 | 1.5% | Apr 27, 2022 | Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load ... |
| CVE-2022-28197 | MEDIUM | 5 | 0.2% | Apr 27, 2022 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validat... |
| CVE-2022-28196 | MEDIUM | 4.6 | 0.2% | Apr 27, 2022 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient va... |
| CVE-2022-28195 | MEDIUM | 5.7 | 0.2% | Apr 27, 2022 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient val... |
| CVE-2022-28194 | MEDIUM | 5.6 | 0.3% | Apr 27, 2022 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled... |
| CVE-2022-28193 | MEDIUM | 5.6 | 0.3% | Apr 27, 2022 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient valida... |
| CVE-2022-24372 | MEDIUM | 4.6 | 0.5% | Apr 27, 2022 | Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of... |
| CVE-2022-23822 | MEDIUM | 6.8 | 0.3% | Apr 27, 2022 | In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassi... |
| CVE-2022-22277 | MEDIUM | 5.3 | 0.7% | Apr 27, 2022 | A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext. |
| CVE-2022-22276 | MEDIUM | 5.3 | 0.7% | Apr 27, 2022 | A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user. |
| CVE-2022-1507 | MEDIUM | 5.5 | 0.9% | Apr 27, 2022 | chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a deni... |
| CVE-2022-22345 | MEDIUM | 4.8 | 1.8% | Apr 27, 2022 | IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J... |
| CVE-2022-22323 | MEDIUM | 6.5 | 1.0% | Apr 27, 2022 | IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable t... |
| CVE-2022-22312 | MEDIUM | 6.5 | 1.0% | Apr 27, 2022 | IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable t... |
| CVE-2022-24889 | MEDIUM | 4.3 | 0.6% | Apr 27, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 21.0.... |
| CVE-2022-24888 | MEDIUM | 4.3 | 1.2% | Apr 27, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 20.0.... |
| CVE-2022-24887 | MEDIUM | 6.1 | 0.9% | Apr 27, 2022 | Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versio... |
| CVE-2022-1504 | MEDIUM | 6.1 | 1.0% | Apr 27, 2022 | XSS in /demo/module/?module=HERE in GitHub repository microweber/microweber prior to 1.2.15. Typical impact of XSS attac... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now