2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-27436 | MEDIUM | 4.8 | 1.0% | Apr 4, 2022 | A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attack... |
| CVE-2022-26616 | MEDIUM | 6.1 | 1.0% | Apr 4, 2022 | PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks... |
| CVE-2022-24191 | MEDIUM | 5.5 | 0.7% | Apr 4, 2022 | In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memo... |
| CVE-2022-1225 | MEDIUM | 6.5 | 1.0% | Apr 4, 2022 | Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6. |
| CVE-2022-1224 | MEDIUM | 6.5 | 1.0% | Apr 4, 2022 | Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6. |
| CVE-2022-1223 | MEDIUM | 6.5 | 1.2% | Apr 4, 2022 | Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6. |
| CVE-2022-1222 | MEDIUM | 5.5 | 0.8% | Apr 4, 2022 | Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
| CVE-2022-27248 | MEDIUM | 6.5 | 2.8% | Apr 3, 2022 | A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download ar... |
| CVE-2022-28389 | MEDIUM | 5.5 | 0.3% | Apr 3, 2022 | mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. |
| CVE-2022-28388 | MEDIUM | 5.5 | 0.4% | Apr 3, 2022 | usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free. |
| CVE-2022-0406 | MEDIUM | 4.3 | 0.7% | Apr 3, 2022 | Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16. |
| CVE-2022-0405 | MEDIUM | 4.3 | 0.7% | Apr 3, 2022 | Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16. |
| CVE-2022-28379 | MEDIUM | 4.8 | 71.2% | Apr 3, 2022 | jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion. |
| CVE-2022-28378 | MEDIUM | 6.1 | 0.6% | Apr 3, 2022 | Craft CMS before 3.7.29 allows XSS. |
| CVE-2022-1211 | MEDIUM | 6.5 | 0.9% | Apr 3, 2022 | A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter... |
| CVE-2022-1210 | MEDIUM | 6.5 | 1.9% | Apr 3, 2022 | A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Ha... |
| CVE-2022-28356 | MEDIUM | 5.5 | 0.6% | Apr 2, 2022 | In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c. |
| CVE-2022-28352 | MEDIUM | 4.8 | 0.4% | Apr 2, 2022 | WeeChat (aka Wee Enhanced Environment for Chat) 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of ... |
| CVE-2022-1201 | MEDIUM | 6.5 | 0.4% | Apr 2, 2022 | NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is ... |
| CVE-2022-25160 | MEDIUM | 5.9 | 1.1% | Apr 1, 2022 | Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versi... |
| CVE-2022-22950 | MEDIUM | 6.5 | 36.1% | Apr 1, 2022 | n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specia... |
| CVE-2022-21830 | MEDIUM | 6.1 | 0.8% | Apr 1, 2022 | A blind self XSS vulnerability exists in RocketChat LiveChat <v1.9 that could allow an attacker to trick a victim pastin... |
| CVE-2022-1018 | MEDIUM | 5.5 | 2.1% | Apr 1, 2022 | When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vuln... |
| CVE-2022-0922 | MEDIUM | 6.5 | 0.4% | Apr 1, 2022 | The software does not perform any authentication for critical system functionality. |
| CVE-2022-0489 | MEDIUM | 5.7 | 1.5% | Apr 1, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DO... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now