2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26107 | MEDIUM | 6.5 | 0.9% | Apr 12, 2022 | When a user opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) received from untrusted sources in SAP 3D Visual... |
| CVE-2022-26106 | MEDIUM | 6.5 | 0.9% | Apr 12, 2022 | When a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from untrusted sources in SAP 3D... |
| CVE-2022-26105 | MEDIUM | 6.1 | 0.8% | Apr 12, 2022 | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution ... |
| CVE-2022-23702 | MEDIUM | 6.7 | 0.2% | Apr 12, 2022 | A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnera... |
| CVE-2022-22541 | MEDIUM | 6.5 | 0.7% | Apr 12, 2022 | SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information... |
| CVE-2022-21202 | MEDIUM | 5.5 | 0.7% | Apr 12, 2022 | The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of sensitive information. |
| CVE-2022-21168 | MEDIUM | 5.5 | 0.7% | Apr 12, 2022 | The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure. |
| CVE-2022-24248 | MEDIUM | 6.5 | 20.4% | Apr 12, 2022 | RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel.... |
| CVE-2022-24247 | MEDIUM | 6.5 | 3.8% | Apr 12, 2022 | RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel... |
| CVE-2022-0878 | MEDIUM | 6.5 | 0.5% | Apr 12, 2022 | Electric Vehicle (EV) commonly utilises the Combined Charging System (CCS) for DC rapid charging. To exchange important ... |
| CVE-2022-0140 | MEDIUM | 5.3 | 3.8% | Apr 12, 2022 | The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing una... |
| CVE-2022-28662 | MEDIUM | 6.5 | 0.8% | Apr 12, 2022 | A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an ... |
| CVE-2022-28329 | MEDIUM | 6.5 | 0.4% | Apr 12, 2022 | A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versi... |
| CVE-2022-27481 | MEDIUM | 5.3 | 0.2% | Apr 12, 2022 | A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versi... |
| CVE-2022-25756 | MEDIUM | 6.1 | 0.5% | Apr 12, 2022 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 E... |
| CVE-2022-25650 | MEDIUM | 6.5 | 0.6% | Apr 12, 2022 | A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications... |
| CVE-2022-24837 | MEDIUM | 5.3 | 1.1% | Apr 11, 2022 | HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version... |
| CVE-2022-24833 | MEDIUM | 6.1 | 1.2% | Apr 11, 2022 | PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In Priva... |
| CVE-2022-24832 | MEDIUM | 6.8 | 1.6% | Apr 11, 2022 | GoCD is an open source a continuous delivery server. The bundled gocd-ldap-authentication-plugin included with the GoCD ... |
| CVE-2022-28544 | MEDIUM | 5.5 | 0.9% | Apr 11, 2022 | Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allow... |
| CVE-2022-28543 | MEDIUM | 5.5 | 0.3% | Apr 11, 2022 | Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as... |
| CVE-2022-28542 | MEDIUM | 5.5 | 0.3% | Apr 11, 2022 | Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access priv... |
| CVE-2022-27845 | MEDIUM | 4.8 | 0.8% | Apr 11, 2022 | Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPres... |
| CVE-2022-27841 | MEDIUM | 4.3 | 0.3% | Apr 11, 2022 | Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that i... |
| CVE-2022-27840 | MEDIUM | 4.4 | 0.2% | Apr 11, 2022 | Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbit... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now