2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-23102MEDIUM6.1A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an ...
CVE-2022-0539MEDIUM5.4Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.
CVE-2022-23378MEDIUM5.4A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D"...
CVE-2022-0536MEDIUM5.9Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.
CVE-2022-24694MEDIUM4.3In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area c...
CVE-2022-0527MEDIUM6.1Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.
CVE-2022-0526MEDIUM6.1Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.
CVE-2022-24682MEDIUM6.1An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), a...
CVE-2022-23627MEDIUM6.8ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneousl...
CVE-2022-21713MEDIUM4.3Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API en...
CVE-2022-21702MEDIUM5.4Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML c...
CVE-2022-0510MEDIUM5.4Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.
CVE-2022-0509MEDIUM5.4Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.
CVE-2022-22146MEDIUM6.1Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an ...
CVE-2022-22142MEDIUM6.1Reflected cross-site scripting vulnerability in the checkbox of php_mailform versions prior to Version 1.40 allows a rem...
CVE-2022-21805MEDIUM6.1Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 al...
CVE-2022-21799MEDIUM5.2Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on t...
CVE-2022-0508MEDIUM5.3Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9...
CVE-2022-0506MEDIUM5.4Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0505MEDIUM6.5Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0504MEDIUM6.5Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-21816MEDIUM5.5NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can c...
CVE-2022-21815MEDIUM5.5NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for priva...
CVE-2022-21814MEDIUM6.1NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of in...
CVE-2022-21813MEDIUM6.1NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficie...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now