2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0390 | MEDIUM | 4.3 | 0.9% | Apr 1, 2022 | Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project ... |
| CVE-2022-0373 | MEDIUM | 4.3 | 0.9% | Apr 1, 2022 | Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-m... |
| CVE-2022-26565 | MEDIUM | 4.8 | 0.5% | Apr 1, 2022 | A cross-site scripting (XSS) vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to exec... |
| CVE-2022-23158 | MEDIUM | 4.4 | 0.7% | Apr 1, 2022 | Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user... |
| CVE-2022-23157 | MEDIUM | 4.4 | 0.2% | Apr 1, 2022 | Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A authenticated malicious ... |
| CVE-2022-23156 | MEDIUM | 6.7 | 0.2% | Apr 1, 2022 | Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could po... |
| CVE-2022-1207 | MEDIUM | 6.6 | 0.9% | Apr 1, 2022 | Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read se... |
| CVE-2022-22404 | MEDIUM | 6.5 | 0.9% | Apr 1, 2022 | IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.... |
| CVE-2022-22328 | MEDIUM | 6.2 | 0.2% | Apr 1, 2022 | IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform uninte... |
| CVE-2022-24181 | MEDIUM | 6.1 | 6.1% | Apr 1, 2022 | Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to... |
| CVE-2022-27966 | MEDIUM | 6.5 | 0.5% | Mar 31, 2022 | Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a... |
| CVE-2022-27965 | MEDIUM | 6.5 | 0.5% | Mar 31, 2022 | Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a c... |
| CVE-2022-27964 | MEDIUM | 6.5 | 0.5% | Mar 31, 2022 | Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via... |
| CVE-2022-27963 | MEDIUM | 6.5 | 0.4% | Mar 31, 2022 | Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a c... |
| CVE-2022-24794 | MEDIUM | 6.1 | 0.7% | Mar 31, 2022 | Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users... |
| CVE-2022-22311 | MEDIUM | 6.5 | 0.7% | Mar 31, 2022 | IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or po... |
| CVE-2022-0350 | MEDIUM | 5.4 | 0.5% | Mar 31, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13. |
| CVE-2022-27496 | MEDIUM | 6.1 | 0.7% | Mar 31, 2022 | Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arb... |
| CVE-2022-23183 | MEDIUM | 6.5 | 1.4% | Mar 31, 2022 | Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro ve... |
| CVE-2022-26644 | MEDIUM | 6.1 | 0.6% | Mar 30, 2022 | Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via par... |
| CVE-2022-24135 | MEDIUM | 6.1 | 0.6% | Mar 30, 2022 | QingScan 1.3.0 is affected by Cross Site Scripting (XSS) vulnerability in all search functions. |
| CVE-2022-27907 | MEDIUM | 4.3 | 0.7% | Mar 30, 2022 | Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF. |
| CVE-2022-23801 | MEDIUM | 6.1 | 0.6% | Mar 30, 2022 | An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media. |
| CVE-2022-23800 | MEDIUM | 6.1 | 0.7% | Mar 30, 2022 | An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in var... |
| CVE-2022-23798 | MEDIUM | 6.1 | 0.6% | Mar 30, 2022 | An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could resul... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now