2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-24932 | MEDIUM | 4.6 | 0.1% | Mar 10, 2022 | Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physi... |
| CVE-2022-24608 | MEDIUM | 6.1 | 0.7% | Mar 10, 2022 | Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php. |
| CVE-2022-24432 | MEDIUM | 5.4 | 0.6% | Mar 10, 2022 | Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce... |
| CVE-2022-24399 | MEDIUM | 6.1 | 1.4% | Mar 10, 2022 | The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input na... |
| CVE-2022-24398 | MEDIUM | 6.5 | 0.8% | Mar 10, 2022 | Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticate... |
| CVE-2022-24397 | MEDIUM | 6.1 | 0.8% | Mar 10, 2022 | SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, ... |
| CVE-2022-24395 | MEDIUM | 6.1 | 0.6% | Mar 10, 2022 | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c... |
| CVE-2022-24177 | MEDIUM | 6.1 | 0.7% | Mar 10, 2022 | A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows a... |
| CVE-2022-22835 | MEDIUM | 6.5 | 14.5% | Mar 10, 2022 | An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL ... |
| CVE-2022-21158 | MEDIUM | 5.4 | 0.5% | Mar 10, 2022 | A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (... |
| CVE-2022-21146 | MEDIUM | 6.1 | 0.9% | Mar 10, 2022 | Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arb... |
| CVE-2022-21132 | MEDIUM | 6.5 | 1.7% | Mar 10, 2022 | Directory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions prior to 0.1.5_4 and pfS... |
| CVE-2022-20060 | MEDIUM | 6.6 | 0.1% | Mar 10, 2022 | In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead ... |
| CVE-2022-20059 | MEDIUM | 6.6 | 0.1% | Mar 10, 2022 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca... |
| CVE-2022-20058 | MEDIUM | 6.6 | 0.1% | Mar 10, 2022 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca... |
| CVE-2022-20057 | MEDIUM | 6.5 | 0.1% | Mar 10, 2022 | In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of p... |
| CVE-2022-20056 | MEDIUM | 6.6 | 0.1% | Mar 10, 2022 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca... |
| CVE-2022-20055 | MEDIUM | 6.8 | 0.1% | Mar 10, 2022 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca... |
| CVE-2022-20051 | MEDIUM | 5.5 | 0.1% | Mar 10, 2022 | In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could le... |
| CVE-2022-20050 | MEDIUM | 6.7 | 0.1% | Mar 10, 2022 | In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local ... |
| CVE-2022-20049 | MEDIUM | 6.7 | 0.1% | Mar 10, 2022 | In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalati... |
| CVE-2022-0904 | MEDIUM | 6.5 | 0.9% | Mar 10, 2022 | A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an atta... |
| CVE-2022-0865 | MEDIUM | 6.5 | 1.5% | Mar 10, 2022 | Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. Fo... |
| CVE-2022-0856 | MEDIUM | 6.5 | 2.8% | Mar 10, 2022 | libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Ser... |
| CVE-2022-0433 | MEDIUM | 5.5 | 0.3% | Mar 10, 2022 | A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_nex... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now