2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1022 | MEDIUM | 5.4 | 4.5% | Apr 21, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0. |
| CVE-2022-24272 | MEDIUM | 6.5 | 0.8% | Apr 21, 2022 | An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $ext... |
| CVE-2022-1420 | MEDIUM | 5.5 | 1.4% | Apr 21, 2022 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774. |
| CVE-2022-27237 | MEDIUM | 6.1 | 0.5% | Apr 21, 2022 | There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. De... |
| CVE-2022-29548 | MEDIUM | 6.1 | 40.5% | Apr 21, 2022 | A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, ... |
| CVE-2022-27926 | MEDIUM | 6.1 | 17.3% | Apr 21, 2022 | A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboratio... |
| CVE-2022-29537 | MEDIUM | 5.5 | 0.6% | Apr 20, 2022 | gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Bo... |
| CVE-2022-29533 | MEDIUM | 6.1 | 0.8% | Apr 20, 2022 | An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situatio... |
| CVE-2022-29532 | MEDIUM | 4.8 | 0.8% | Apr 20, 2022 | An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascrip... |
| CVE-2022-29531 | MEDIUM | 5.4 | 0.8% | Apr 20, 2022 | An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name. |
| CVE-2022-29530 | MEDIUM | 5.4 | 0.8% | Apr 20, 2022 | An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters. |
| CVE-2022-29529 | MEDIUM | 5.4 | 0.8% | Apr 20, 2022 | An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field. |
| CVE-2022-24865 | MEDIUM | 6.5 | 1.2% | Apr 20, 2022 | HumHub is an Open Source Enterprise Social Network. In affected versions users who are forced to change their password b... |
| CVE-2022-24871 | MEDIUM | 5.5 | 1.0% | Apr 20, 2022 | Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the... |
| CVE-2022-24864 | MEDIUM | 5.4 | 0.6% | Apr 20, 2022 | Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject ... |
| CVE-2022-24799 | MEDIUM | 6.1 | 0.9% | Apr 20, 2022 | wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code hig... |
| CVE-2022-27179 | MEDIUM | 6.5 | 0.5% | Apr 20, 2022 | A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain ac... |
| CVE-2022-26519 | MEDIUM | 5.5 | 0.2% | Apr 20, 2022 | There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Versi... |
| CVE-2022-1318 | MEDIUM | 5.5 | 0.1% | Apr 20, 2022 | Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configu... |
| CVE-2022-25344 | MEDIUM | 6.1 | 0.7% | Apr 20, 2022 | An XSS issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application doesn't properly ch... |
| CVE-2022-1254 | MEDIUM | 6.1 | 0.8% | Apr 20, 2022 | A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to ... |
| CVE-2022-24858 | MEDIUM | 6.1 | 0.7% | Apr 19, 2022 | next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted.... |
| CVE-2022-28222 | MEDIUM | 6.1 | 3.0% | Apr 19, 2022 | The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQ... |
| CVE-2022-28221 | MEDIUM | 6.1 | 2.4% | Apr 19, 2022 | The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQ... |
| CVE-2022-27863 | MEDIUM | 5.3 | 1.0% | Apr 19, 2022 | Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now