2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-27152 | MEDIUM | 5.7 | 0.3% | Apr 8, 2022 | Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file m... |
| CVE-2022-1283 | MEDIUM | 5.5 | 0.7% | Apr 8, 2022 | NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. Thi... |
| CVE-2022-27148 | MEDIUM | 5.5 | 0.8% | Apr 8, 2022 | GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow. |
| CVE-2022-27147 | MEDIUM | 5.5 | 0.7% | Apr 8, 2022 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_... |
| CVE-2022-27146 | MEDIUM | 5.5 | 0.8% | Apr 8, 2022 | GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gf_isom_apple_enum_tag. |
| CVE-2022-27145 | MEDIUM | 5.5 | 0.8% | Apr 8, 2022 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_mo... |
| CVE-2022-24229 | MEDIUM | 6.1 | 1.8% | Apr 8, 2022 | A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers i... |
| CVE-2022-27991 | MEDIUM | 6.5 | 1.0% | Apr 8, 2022 | Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /staff_login.php via... |
| CVE-2022-27348 | MEDIUM | 4.8 | 1.1% | Apr 8, 2022 | Social Codia SMS v1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This v... |
| CVE-2022-27063 | MEDIUM | 6.1 | 1.4% | Apr 8, 2022 | AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. Th... |
| CVE-2022-27062 | MEDIUM | 4.8 | 1.1% | Apr 8, 2022 | AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulner... |
| CVE-2022-26624 | MEDIUM | 6.1 | 0.9% | Apr 8, 2022 | Bootstrap v3.1.11 and v3.3.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Title paramete... |
| CVE-2022-24681 | MEDIUM | 6.1 | 3.6% | Apr 7, 2022 | Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock... |
| CVE-2022-25595 | MEDIUM | 6.5 | 0.4% | Apr 7, 2022 | ASUS RT-AC86U has improper user request handling, which allows an unauthenticated LAN attacker to cause a denial of serv... |
| CVE-2022-25594 | MEDIUM | 5.3 | 1.0% | Apr 7, 2022 | Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote att... |
| CVE-2022-22518 | MEDIUM | 6.5 | 0.6% | Apr 7, 2022 | A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymou... |
| CVE-2022-22513 | MEDIUM | 6.5 | 1.0% | Apr 7, 2022 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODES... |
| CVE-2022-25339 | MEDIUM | 5.5 | 0.2% | Apr 7, 2022 | ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers. |
| CVE-2022-25338 | MEDIUM | 6.8 | 0.2% | Apr 7, 2022 | ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers. |
| CVE-2022-27819 | MEDIUM | 5.3 | 0.8% | Apr 7, 2022 | SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of ser... |
| CVE-2022-20782 | MEDIUM | 6.5 | 1.0% | Apr 6, 2022 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat... |
| CVE-2022-20781 | MEDIUM | 5.4 | 0.6% | Apr 6, 2022 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) c... |
| CVE-2022-20741 | MEDIUM | 5.4 | 0.6% | Apr 6, 2022 | A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analy... |
| CVE-2022-20675 | MEDIUM | 5.3 | 1.2% | Apr 6, 2022 | A vulnerability in the TCP/IP stack of Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cis... |
| CVE-2022-20665 | MEDIUM | 6.7 | 0.3% | Apr 6, 2022 | A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affe... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now