2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23796 | MEDIUM | 6.1 | 0.6% | Mar 30, 2022 | An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fi... |
| CVE-2022-23794 | MEDIUM | 5.3 | 0.9% | Mar 30, 2022 | An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length... |
| CVE-2022-23136 | MEDIUM | 5.4 | 0.4% | Mar 30, 2022 | There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting ... |
| CVE-2022-25619 | MEDIUM | 6.7 | 0.3% | Mar 30, 2022 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profel... |
| CVE-2022-24131 | MEDIUM | 6.1 | 0.8% | Mar 30, 2022 | DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which... |
| CVE-2022-1181 | MEDIUM | 5.4 | 51.5% | Mar 30, 2022 | Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2. |
| CVE-2022-1179 | MEDIUM | 5.4 | 76.9% | Mar 30, 2022 | Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr pri... |
| CVE-2022-1178 | MEDIUM | 5.4 | 51.6% | Mar 30, 2022 | Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. |
| CVE-2022-23869 | MEDIUM | 6.5 | 0.7% | Mar 30, 2022 | In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the pass... |
| CVE-2022-1177 | MEDIUM | 4.3 | 0.9% | Mar 30, 2022 | Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0. |
| CVE-2022-1172 | MEDIUM | 5 | 0.7% | Mar 30, 2022 | Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
| CVE-2022-1163 | MEDIUM | 4.8 | 3.5% | Mar 30, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next. |
| CVE-2022-28202 | MEDIUM | 6.1 | 1.2% | Mar 30, 2022 | An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight,... |
| CVE-2022-26951 | MEDIUM | 6.1 | 0.5% | Mar 30, 2022 | Archer 6.x through 6.10 (6.10.0.0) contains a reflected XSS vulnerability. A remote SAML-unauthenticated malicious Arche... |
| CVE-2022-26950 | MEDIUM | 6.1 | 0.5% | Mar 30, 2022 | Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote unprivileged attacker may po... |
| CVE-2022-26949 | MEDIUM | 6.5 | 0.9% | Mar 30, 2022 | Archer 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on attachments. A remote authe... |
| CVE-2022-26947 | MEDIUM | 5.4 | 0.6% | Mar 30, 2022 | Archer 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability. A remote authenticated malicious Archer use... |
| CVE-2022-26244 | MEDIUM | 5.4 | 0.5% | Mar 30, 2022 | A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to ... |
| CVE-2022-22948 | MEDIUM | 6.5 | 13.9% | Mar 29, 2022 | The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious act... |
| CVE-2022-1122 | MEDIUM | 5.5 | 1.1% | Mar 29, 2022 | A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large... |
| CVE-2022-28160 | MEDIUM | 6.5 | 1.1% | Mar 29, 2022 | Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on t... |
| CVE-2022-28159 | MEDIUM | 5.4 | 0.8% | Mar 29, 2022 | Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests param... |
| CVE-2022-28158 | MEDIUM | 6.5 | 0.7% | Mar 29, 2022 | A missing permission check in Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Overall/Re... |
| CVE-2022-28157 | MEDIUM | 6.5 | 1.4% | Mar 29, 2022 | Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbi... |
| CVE-2022-28156 | MEDIUM | 6.5 | 1.5% | Mar 29, 2022 | Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now