2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0560 | MEDIUM | 6.1 | 1.0% | Feb 11, 2022 | Open Redirect in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-24959 | MEDIUM | 5.5 | 0.4% | Feb 11, 2022 | An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/h... |
| CVE-2022-23321 | MEDIUM | 4.8 | 0.8% | Feb 10, 2022 | A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when ed... |
| CVE-2022-20710 | MEDIUM | 5.3 | 2.3% | Feb 10, 2022 | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t... |
| CVE-2022-20704 | MEDIUM | 4.8 | 2.2% | Feb 10, 2022 | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t... |
| CVE-2022-20680 | MEDIUM | 6.5 | 1.1% | Feb 10, 2022 | A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remot... |
| CVE-2022-20630 | MEDIUM | 4.4 | 0.2% | Feb 10, 2022 | A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive info... |
| CVE-2022-0021 | MEDIUM | 5.5 | 0.2% | Feb 10, 2022 | An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows tha... |
| CVE-2022-0020 | MEDIUM | 5.4 | 1.7% | Feb 10, 2022 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticat... |
| CVE-2022-0019 | MEDIUM | 5.5 | 0.2% | Feb 10, 2022 | An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that e... |
| CVE-2022-0018 | MEDIUM | 6.5 | 0.7% | Feb 10, 2022 | An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the ... |
| CVE-2022-0011 | MEDIUM | 6.5 | 0.7% | Feb 10, 2022 | PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are block... |
| CVE-2022-24111 | MEDIUM | 5.3 | 0.8% | Feb 10, 2022 | In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non... |
| CVE-2022-0558 | MEDIUM | 5.4 | 0.9% | Feb 10, 2022 | Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-24320 | MEDIUM | 5.9 | 0.5% | Feb 9, 2022 | A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communic... |
| CVE-2022-24319 | MEDIUM | 5.9 | 0.6% | Feb 9, 2022 | A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communic... |
| CVE-2022-23049 | MEDIUM | 5.4 | 3.0% | Feb 9, 2022 | Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header wh... |
| CVE-2022-23047 | MEDIUM | 4.8 | 2.9% | Feb 9, 2022 | Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organi... |
| CVE-2022-22812 | MEDIUM | 6.1 | 0.6% | Feb 9, 2022 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that... |
| CVE-2022-22809 | MEDIUM | 5.3 | 0.8% | Feb 9, 2022 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch... |
| CVE-2022-22780 | MEDIUM | 6.5 | 1.7% | Feb 9, 2022 | The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions... |
| CVE-2022-22546 | MEDIUM | 5.4 | 0.5% | Feb 9, 2022 | Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Busi... |
| CVE-2022-22545 | MEDIUM | 4.9 | 0.8% | Feb 9, 2022 | A high privileged user who has access to transaction SM59 can read connection details stored with the destination for ht... |
| CVE-2022-22542 | MEDIUM | 6.5 | 1.0% | Feb 9, 2022 | S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Ro... |
| CVE-2022-22539 | MEDIUM | 6.5 | 1.0% | Feb 9, 2022 | When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterpr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now