2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23701 | MEDIUM | 5.3 | 0.7% | Feb 24, 2022 | A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO ... |
| CVE-2022-24709 | MEDIUM | 6.1 | 0.7% | Feb 24, 2022 | @awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed... |
| CVE-2022-25307 | MEDIUM | 6.1 | 1.4% | Feb 24, 2022 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o... |
| CVE-2022-25306 | MEDIUM | 6.1 | 1.4% | Feb 24, 2022 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o... |
| CVE-2022-25305 | MEDIUM | 6.1 | 81.2% | Feb 24, 2022 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o... |
| CVE-2022-23135 | MEDIUM | 6.5 | 1.4% | Feb 24, 2022 | There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of us... |
| CVE-2022-0710 | MEDIUM | 6.1 | 2.4% | Feb 24, 2022 | The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via ... |
| CVE-2022-0683 | MEDIUM | 6.1 | 3.2% | Feb 24, 2022 | The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escap... |
| CVE-2022-0653 | MEDIUM | 6.1 | 2.7% | Feb 24, 2022 | The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due ... |
| CVE-2022-0544 | MEDIUM | 5.5 | 1.1% | Feb 24, 2022 | An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read ... |
| CVE-2022-22349 | MEDIUM | 4.3 | 1.0% | Feb 24, 2022 | IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not p... |
| CVE-2022-24708 | MEDIUM | 5.4 | 0.5% | Feb 24, 2022 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Track... |
| CVE-2022-24687 | MEDIUM | 6.5 | 1.4% | Feb 24, 2022 | HashiCorp Consul and Consul Enterprise 1.9.0 through 1.9.14, 1.10.7, and 1.11.2 clusters with at least one Ingress Gatew... |
| CVE-2022-25638 | MEDIUM | 6.5 | 0.6% | Feb 24, 2022 | In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a... |
| CVE-2022-25363 | MEDIUM | 6.5 | 0.9% | Feb 24, 2022 | WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify pri... |
| CVE-2022-25355 | MEDIUM | 5.3 | 1.1% | Feb 24, 2022 | EC-CUBE 3.0.0 to 3.0.18-p3 and EC-CUBE 4.0.0 to 4.1.1 improperly handle HTTP Host header values, which may lead a remote... |
| CVE-2022-25290 | MEDIUM | 6.5 | 0.7% | Feb 24, 2022 | WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve c... |
| CVE-2022-24633 | MEDIUM | 5.3 | 0.8% | Feb 24, 2022 | All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "p... |
| CVE-2022-24620 | MEDIUM | 5.4 | 0.6% | Feb 24, 2022 | Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In thi... |
| CVE-2022-24615 | MEDIUM | 5.5 | 0.7% | Feb 24, 2022 | zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result... |
| CVE-2022-24614 | MEDIUM | 5.5 | 0.7% | Feb 24, 2022 | When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of mem... |
| CVE-2022-24613 | MEDIUM | 5.5 | 0.8% | Feb 24, 2022 | metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which... |
| CVE-2022-24599 | MEDIUM | 6.5 | 1.7% | Feb 24, 2022 | In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which... |
| CVE-2022-24582 | MEDIUM | 5.4 | 0.5% | Feb 24, 2022 | Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is... |
| CVE-2022-24566 | MEDIUM | 5.4 | 0.6% | Feb 24, 2022 | In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now