2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0906 | MEDIUM | 4.8 | 0.6% | Mar 10, 2022 | Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12. |
| CVE-2022-0890 | MEDIUM | 5.5 | 0.8% | Mar 10, 2022 | NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2. |
| CVE-2022-24747 | MEDIUM | 5.3 | 1.1% | Mar 9, 2022 | Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. Affected vers... |
| CVE-2022-24746 | MEDIUM | 6.1 | 0.8% | Mar 9, 2022 | Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected v... |
| CVE-2022-24745 | MEDIUM | 6.5 | 0.5% | Mar 9, 2022 | Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected v... |
| CVE-2022-24323 | MEDIUM | 5.9 | 0.8% | Mar 9, 2022 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of co... |
| CVE-2022-24322 | MEDIUM | 5.9 | 0.6% | Mar 9, 2022 | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause... |
| CVE-2022-24741 | MEDIUM | 6.5 | 1.6% | Mar 9, 2022 | Nextcloud server is an open source, self hosted cloud style services platform. In affected versions an attacker can caus... |
| CVE-2022-24919 | MEDIUM | 4.4 | 0.8% | Mar 9, 2022 | An authenticated user can create a link with reflected Javascript code inside it for graphs’ page and send it to other u... |
| CVE-2022-24918 | MEDIUM | 4.4 | 0.7% | Mar 9, 2022 | An authenticated user can create a link with reflected Javascript code inside it for items’ page and send it to other us... |
| CVE-2022-24917 | MEDIUM | 4.4 | 0.8% | Mar 9, 2022 | An authenticated user can create a link with reflected Javascript code inside it for services’ page and send it to other... |
| CVE-2022-24349 | MEDIUM | 4.4 | 0.8% | Mar 9, 2022 | An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malic... |
| CVE-2022-22511 | MEDIUM | 5.4 | 0.6% | Mar 9, 2022 | Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized ... |
| CVE-2022-0022 | MEDIUM | 4.4 | 0.1% | Mar 9, 2022 | Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator... |
| CVE-2022-24526 | MEDIUM | 6.1 | 1.6% | Mar 9, 2022 | Visual Studio Code Spoofing Vulnerability |
| CVE-2022-24522 | MEDIUM | 6.5 | 2.1% | Mar 9, 2022 | Skype Extension for Chrome Information Disclosure Vulnerability |
| CVE-2022-24519 | MEDIUM | 6.5 | 2.6% | Mar 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability |
| CVE-2022-24518 | MEDIUM | 6.5 | 2.6% | Mar 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability |
| CVE-2022-24515 | MEDIUM | 6.5 | 2.6% | Mar 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability |
| CVE-2022-24512 | MEDIUM | 6.3 | 1.6% | Mar 9, 2022 | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-24511 | MEDIUM | 5.5 | 1.0% | Mar 9, 2022 | Microsoft Office Word Tampering Vulnerability |
| CVE-2022-24506 | MEDIUM | 6.5 | 2.6% | Mar 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability |
| CVE-2022-24503 | MEDIUM | 5.4 | 2.2% | Mar 9, 2022 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
| CVE-2022-24502 | MEDIUM | 4.3 | 32.4% | Mar 9, 2022 | Windows HTML Platforms Security Feature Bypass Vulnerability |
| CVE-2022-24463 | MEDIUM | 6.5 | 31.8% | Mar 9, 2022 | Microsoft Exchange Server Spoofing Vulnerability |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now