2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25511 | MEDIUM | 6.5 | 0.7% | Mar 11, 2022 | An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place ... |
| CVE-2022-25507 | MEDIUM | 5.4 | 0.5% | Mar 11, 2022 | FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign par... |
| CVE-2022-25506 | MEDIUM | 6.5 | 0.9% | Mar 11, 2022 | FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser. |
| CVE-2022-0821 | MEDIUM | 6.5 | 0.7% | Mar 11, 2022 | Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0. |
| CVE-2022-0820 | MEDIUM | 6.1 | 0.7% | Mar 11, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0. |
| CVE-2022-26847 | MEDIUM | 5.3 | 1.3% | Mar 10, 2022 | SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects. |
| CVE-2022-26778 | MEDIUM | 6.5 | 0.4% | Mar 10, 2022 | Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configurati... |
| CVE-2022-26661 | MEDIUM | 6.5 | 1.4% | Mar 10, 2022 | An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x an... |
| CVE-2022-26652 | MEDIUM | 6.5 | 2.3% | Mar 10, 2022 | NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStre... |
| CVE-2022-26355 | MEDIUM | 4.4 | 0.2% | Mar 10, 2022 | Citrix Federated Authentication Service (FAS) 7.17 - 10.6 causes deployments that have been configured to store a regist... |
| CVE-2022-26104 | MEDIUM | 5.3 | 0.7% | Mar 10, 2022 | SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messag... |
| CVE-2022-26103 | MEDIUM | 5.3 | 0.7% | Mar 10, 2022 | Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an attacker to access inf... |
| CVE-2022-26102 | MEDIUM | 5.4 | 0.5% | Mar 10, 2022 | Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an a... |
| CVE-2022-26101 | MEDIUM | 6.1 | 1.4% | Mar 10, 2022 | Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site S... |
| CVE-2022-25825 | MEDIUM | 5.5 | 0.2% | Mar 10, 2022 | Improper access control vulnerability in Samsung Account prior to version 13.1.0.1 allows attackers to access to the aut... |
| CVE-2022-25822 | MEDIUM | 6.2 | 0.1% | Mar 10, 2022 | An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash. |
| CVE-2022-25820 | MEDIUM | 4.6 | 0.1% | Mar 10, 2022 | A vulnerable design in fingerprint matching algorithm prior to SMR Mar-2022 Release 1 allows physical attackers to perfo... |
| CVE-2022-25819 | MEDIUM | 5.5 | 0.1% | Mar 10, 2022 | OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memor... |
| CVE-2022-25816 | MEDIUM | 4.6 | 0.1% | Mar 10, 2022 | Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change ... |
| CVE-2022-25368 | MEDIUM | 4.7 | 0.3% | Mar 10, 2022 | Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to... |
| CVE-2022-25244 | MEDIUM | 6.5 | 0.9% | Mar 10, 2022 | Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenizat... |
| CVE-2022-25243 | MEDIUM | 6.5 | 0.5% | Mar 10, 2022 | "Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under certain configurations t... |
| CVE-2022-25215 | MEDIUM | 5.3 | 1.1% | Mar 10, 2022 | Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove)... |
| CVE-2022-25213 | MEDIUM | 6.8 | 0.4% | Mar 10, 2022 | Improper physical access control and use of hard-coded credentials in /etc/passwd permits an attacker with physical acce... |
| CVE-2022-25108 | MEDIUM | 5.5 | 0.8% | Mar 10, 2022 | Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now