2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-28869 | MEDIUM | 4.3 | 0.4% | Apr 15, 2022 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing atta... |
| CVE-2022-28868 | MEDIUM | 4.3 | 0.5% | Apr 15, 2022 | An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafte... |
| CVE-2022-24855 | MEDIUM | 5.4 | 0.7% | Apr 14, 2022 | Metabase is an open source business intelligence and analytics application. In affected versions Metabase ships with an ... |
| CVE-2022-24853 | MEDIUM | 5.3 | 2.4% | Apr 14, 2022 | Metabase is an open source business intelligence and analytics application. Metabase has a proxy to load arbitrary URLs ... |
| CVE-2022-24850 | MEDIUM | 4.3 | 0.6% | Apr 14, 2022 | Discourse is an open source platform for community discussion. A category's group permissions settings can be viewed by ... |
| CVE-2022-24849 | MEDIUM | 6.5 | 0.8% | Apr 14, 2022 | DisCatSharp is a Discord API wrapper for .NET. Users of versions 9.8.5, 9.8.6, 9.9.0 and previously published prerelease... |
| CVE-2022-24824 | MEDIUM | 5.3 | 0.9% | Apr 14, 2022 | Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for... |
| CVE-2022-27848 | MEDIUM | 4.8 | 0.5% | Apr 14, 2022 | Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1 |
| CVE-2022-22968 | MEDIUM | 5.3 | 5.7% | Apr 14, 2022 | In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowed... |
| CVE-2022-1328 | MEDIUM | 5.3 | 1.6% | Apr 14, 2022 | Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of i... |
| CVE-2022-21145 | MEDIUM | 4.8 | 77.2% | Apr 14, 2022 | A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1... |
| CVE-2022-22391 | MEDIUM | 4.3 | 0.7% | Apr 14, 2022 | IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensit... |
| CVE-2022-27817 | MEDIUM | 4.4 | 0.4% | Apr 14, 2022 | SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is u... |
| CVE-2022-25166 | MEDIUM | 5 | 1.4% | Apr 14, 2022 | An issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in the OpenVPN configuratio... |
| CVE-2022-22196 | MEDIUM | 6.5 | 0.4% | Apr 14, 2022 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Ne... |
| CVE-2022-22193 | MEDIUM | 5.5 | 0.2% | Apr 14, 2022 | An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Juno... |
| CVE-2022-22191 | MEDIUM | 6.5 | 0.4% | Apr 14, 2022 | A Denial of Service (DoS) vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos O... |
| CVE-2022-22186 | MEDIUM | 6.5 | 0.6% | Apr 14, 2022 | Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the ... |
| CVE-2022-22182 | MEDIUM | 6.1 | 0.7% | Apr 14, 2022 | A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL that... |
| CVE-2022-22181 | MEDIUM | 5.4 | 0.6% | Apr 14, 2022 | A reflected Cross-site Scripting (XSS) vulnerability in J-Web of Juniper Networks Junos OS allows a network-based authen... |
| CVE-2022-1257 | MEDIUM | 5.5 | 0.6% | Apr 14, 2022 | Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a loca... |
| CVE-2022-1351 | MEDIUM | 5.4 | 0.8% | Apr 14, 2022 | Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4. |
| CVE-2022-0023 | MEDIUM | 5.9 | 0.7% | Apr 13, 2022 | An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-O... |
| CVE-2022-27847 | MEDIUM | 4.3 | 0.4% | Apr 13, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to import... |
| CVE-2022-27846 | MEDIUM | 4.3 | 0.4% | Apr 13, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to create... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now