2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0246 | MEDIUM | 4.9 | 3.4% | Apr 11, 2022 | The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functio... |
| CVE-2022-26414 | MEDIUM | 5.5 | 0.2% | Apr 11, 2022 | A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware versi... |
| CVE-2022-1045 | MEDIUM | 5.4 | 1.5% | Apr 11, 2022 | Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0. |
| CVE-2022-0936 | MEDIUM | 5.4 | 0.6% | Apr 11, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0. |
| CVE-2022-27961 | MEDIUM | 5.4 | 0.4% | Apr 10, 2022 | A cross-site scripting (XSS) vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary ... |
| CVE-2022-27960 | MEDIUM | 5.4 | 0.4% | Apr 10, 2022 | Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to a... |
| CVE-2022-27958 | MEDIUM | 5.4 | 0.6% | Apr 10, 2022 | Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers t... |
| CVE-2022-27476 | MEDIUM | 6.1 | 0.5% | Apr 10, 2022 | A cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbi... |
| CVE-2022-27280 | MEDIUM | 5.4 | 0.5% | Apr 10, 2022 | InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scr... |
| CVE-2022-27127 | MEDIUM | 6.5 | 0.6% | Apr 10, 2022 | zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php. |
| CVE-2022-27125 | MEDIUM | 6.1 | 0.6% | Apr 10, 2022 | zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /ph... |
| CVE-2022-1291 | MEDIUM | 5.4 | 0.7% | Apr 10, 2022 | XSS vulnerability with default `onCellHtmlData` function in GitHub repository hhurz/tableexport.jquery.plugin prior to 1... |
| CVE-2022-1290 | MEDIUM | 5.4 | 1.6% | Apr 10, 2022 | Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers... |
| CVE-2022-1289 | MEDIUM | 6.5 | 1.1% | Apr 10, 2022 | A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to... |
| CVE-2022-1288 | MEDIUM | 6.1 | 0.5% | Apr 9, 2022 | A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue a... |
| CVE-2022-28365 | MEDIUM | 5.3 | 8.0% | Apr 9, 2022 | Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminf... |
| CVE-2022-28364 | MEDIUM | 5.4 | 0.9% | Apr 9, 2022 | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitc... |
| CVE-2022-28363 | MEDIUM | 6.1 | 4.2% | Apr 9, 2022 | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_pr... |
| CVE-2022-26877 | MEDIUM | 6.5 | 1.1% | Apr 9, 2022 | Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app int... |
| CVE-2022-26588 | MEDIUM | 6.5 | 0.6% | Apr 8, 2022 | A Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account ta... |
| CVE-2022-26855 | MEDIUM | 5.5 | 0.2% | Apr 8, 2022 | Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local maliciou... |
| CVE-2022-24820 | MEDIUM | 5.3 | 1.0% | Apr 8, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user wi... |
| CVE-2022-24819 | MEDIUM | 5.3 | 3.3% | Apr 8, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user wi... |
| CVE-2022-22563 | MEDIUM | 4.4 | 0.2% | Apr 8, 2022 | Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user... |
| CVE-2022-1284 | MEDIUM | 5.5 | 0.8% | Apr 8, 2022 | heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing den... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now