2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26966 | MEDIUM | 5.5 | 0.3% | Mar 12, 2022 | An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitiv... |
| CVE-2022-0930 | MEDIUM | 4.8 | 0.9% | Mar 12, 2022 | File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12. |
| CVE-2022-0929 | MEDIUM | 6.1 | 1.1% | Mar 12, 2022 | XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11. |
| CVE-2022-0926 | MEDIUM | 4.8 | 0.8% | Mar 12, 2022 | File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12. |
| CVE-2022-0880 | MEDIUM | 5.4 | 0.7% | Mar 12, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2. |
| CVE-2022-26533 | MEDIUM | 6.1 | 0.7% | Mar 12, 2022 | Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist. |
| CVE-2022-26276 | MEDIUM | 5.3 | 1.1% | Mar 12, 2022 | An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal. |
| CVE-2022-25839 | MEDIUM | 5.3 | 0.8% | Mar 11, 2022 | The package url-js before 2.1.0 are vulnerable to Improper Input Validation due to improper parsing, which makes it is p... |
| CVE-2022-25601 | MEDIUM | 6.1 | 1.0% | Mar 11, 2022 | Reflected Cross-Site Scripting (XSS) vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugi... |
| CVE-2022-24090 | MEDIUM | 5.5 | 2.0% | Mar 11, 2022 | Adobe Photoshop versions 23.1.1 (and earlier) and 22.5.5 (and earlier) are affected by an out-of-bounds read vulnerabili... |
| CVE-2022-23625 | MEDIUM | 6.5 | 1.2% | Mar 11, 2022 | Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed... |
| CVE-2022-0924 | MEDIUM | 5.5 | 1.3% | Mar 11, 2022 | Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff fil... |
| CVE-2022-0921 | MEDIUM | 6.7 | 2.1% | Mar 11, 2022 | Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.... |
| CVE-2022-0909 | MEDIUM | 5.5 | 1.3% | Mar 11, 2022 | Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file.... |
| CVE-2022-0908 | MEDIUM | 5.5 | 1.3% | Mar 11, 2022 | Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff ... |
| CVE-2022-0907 | MEDIUM | 5.5 | 1.3% | Mar 11, 2022 | Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-se... |
| CVE-2022-0002 | MEDIUM | 6.5 | 0.5% | Mar 11, 2022 | Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to... |
| CVE-2022-0001 | MEDIUM | 6.5 | 0.5% | Mar 11, 2022 | Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authoriz... |
| CVE-2022-0932 | MEDIUM | 6.5 | 1.0% | Mar 11, 2022 | Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2. |
| CVE-2022-0928 | MEDIUM | 5.4 | 2.4% | Mar 11, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12. |
| CVE-2022-0870 | MEDIUM | 5.3 | 3.4% | Mar 11, 2022 | Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5. |
| CVE-2022-0912 | MEDIUM | 4.8 | 0.5% | Mar 11, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11. |
| CVE-2022-26878 | MEDIUM | 5.5 | 0.3% | Mar 11, 2022 | drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated ... |
| CVE-2022-26874 | MEDIUM | 5.4 | 1.0% | Mar 11, 2022 | lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to accoun... |
| CVE-2022-0822 | MEDIUM | 5.4 | 0.6% | Mar 11, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now