2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25041 | MEDIUM | 4.3 | 0.8% | Mar 23, 2022 | OpenEMR v6.0.0 was discovered to contain an incorrect access control issue. |
| CVE-2022-24731 | MEDIUM | 4.9 | 0.9% | Mar 23, 2022 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.5.0 but before... |
| CVE-2022-24730 | MEDIUM | 6.5 | 0.9% | Mar 23, 2022 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.3.0 but before... |
| CVE-2022-25609 | MEDIUM | 5.4 | 0.5% | Mar 23, 2022 | Stored Cross-Site Scripting (XSS) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers with c... |
| CVE-2022-25608 | MEDIUM | 5.4 | 0.3% | Mar 23, 2022 | Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers to tri... |
| CVE-2022-25223 | MEDIUM | 4.3 | 0.8% | Mar 23, 2022 | Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=tra... |
| CVE-2022-25221 | MEDIUM | 6.1 | 0.7% | Mar 23, 2022 | Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a us... |
| CVE-2022-0996 | MEDIUM | 6.5 | 1.5% | Mar 23, 2022 | A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause impr... |
| CVE-2022-0889 | MEDIUM | 6.1 | 0.7% | Mar 23, 2022 | The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing... |
| CVE-2022-0854 | MEDIUM | 5.5 | 0.5% | Mar 23, 2022 | A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw all... |
| CVE-2022-0834 | MEDIUM | 5.4 | 0.5% | Mar 23, 2022 | The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the l... |
| CVE-2022-0750 | MEDIUM | 5.4 | 4.4% | Mar 23, 2022 | The Photoswipe Masonry Gallery WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and s... |
| CVE-2022-22316 | MEDIUM | 6.5 | 0.9% | Mar 23, 2022 | IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to... |
| CVE-2022-23242 | MEDIUM | 4.2 | 0.2% | Mar 23, 2022 | TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of... |
| CVE-2022-0862 | MEDIUM | 5.3 | 0.7% | Mar 23, 2022 | A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator (ePO) ... |
| CVE-2022-0859 | MEDIUM | 6.7 | 0.2% | Mar 23, 2022 | McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to a... |
| CVE-2022-0858 | MEDIUM | 4.7 | 0.8% | Mar 23, 2022 | A cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allow... |
| CVE-2022-0857 | MEDIUM | 6.1 | 0.7% | Mar 23, 2022 | A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Updat... |
| CVE-2022-0842 | MEDIUM | 4.9 | 0.7% | Mar 23, 2022 | A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a rem... |
| CVE-2022-0396 | MEDIUM | 5.3 | 2.6% | Mar 23, 2022 | BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. S... |
| CVE-2022-25518 | MEDIUM | 6.5 | 0.7% | Mar 22, 2022 | In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which allows attackers with d... |
| CVE-2022-25484 | MEDIUM | 5.5 | 0.6% | Mar 22, 2022 | tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. |
| CVE-2022-21718 | MEDIUM | 5 | 0.9% | Mar 22, 2022 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability ... |
| CVE-2022-27090 | MEDIUM | 5.4 | 0.4% | Mar 21, 2022 | Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter. |
| CVE-2022-23350 | MEDIUM | 5.4 | 0.8% | Mar 21, 2022 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now