2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23872 | MEDIUM | 4.8 | 0.6% | Jan 31, 2022 | Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/con... |
| CVE-2022-21659 | MEDIUM | 5.3 | 1.0% | Jan 31, 2022 | Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions ... |
| CVE-2022-0286 | MEDIUM | 5.5 | 0.5% | Jan 31, 2022 | A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of serv... |
| CVE-2022-0414 | MEDIUM | 4.3 | 1.1% | Jan 31, 2022 | Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0. |
| CVE-2022-23409 | MEDIUM | 4.9 | 13.8% | Jan 31, 2022 | The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in ... |
| CVE-2022-24130 | MEDIUM | 5.5 | 1.7% | Jan 31, 2022 | xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in gr... |
| CVE-2022-0273 | MEDIUM | 6.5 | 0.7% | Jan 30, 2022 | Improper Access Control in Pypi calibreweb prior to 0.6.16. |
| CVE-2022-22919 | MEDIUM | 6.1 | 0.6% | Jan 30, 2022 | Adenza AxiomSL ControllerView through 10.8.1 allows redirection for SSO login URLs. |
| CVE-2022-24032 | MEDIUM | 5.3 | 1.0% | Jan 30, 2022 | Adenza AxiomSL ControllerView through 10.8.1 is vulnerable to user enumeration. An attacker can identify valid usernames... |
| CVE-2022-23599 | MEDIUM | 6.1 | 0.7% | Jan 28, 2022 | Products.ATContentTypes are the core content types for Plone 2.1 - 4.3. Versions of Plone that are dependent on Products... |
| CVE-2022-23598 | MEDIUM | 6.1 | 1.0% | Jan 28, 2022 | laminas-form is a package for validating and displaying simple and complex forms. When rendering validation error messag... |
| CVE-2022-0395 | MEDIUM | 5.4 | 0.6% | Jan 28, 2022 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. |
| CVE-2022-0352 | MEDIUM | 6.1 | 0.9% | Jan 28, 2022 | Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16. |
| CVE-2022-23889 | MEDIUM | 5.3 | 1.1% | Jan 28, 2022 | The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to crea... |
| CVE-2022-23887 | MEDIUM | 6.5 | 0.7% | Jan 28, 2022 | YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete u... |
| CVE-2022-23979 | MEDIUM | 4.8 | 0.6% | Jan 28, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in Ultimate Reviews WordPress plugin (... |
| CVE-2022-23456 | MEDIUM | 5.5 | 0.3% | Jan 28, 2022 | Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software. |
| CVE-2022-22938 | MEDIUM | 6.5 | 0.4% | Jan 28, 2022 | VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-servi... |
| CVE-2022-22791 | MEDIUM | 5.4 | 0.4% | Jan 28, 2022 | SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stea... |
| CVE-2022-21199 | MEDIUM | 5.9 | 0.9% | Jan 28, 2022 | An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A s... |
| CVE-2022-22868 | MEDIUM | 4.8 | 0.9% | Jan 28, 2022 | Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting (XSS) vulnerability, that allows attackers to injec... |
| CVE-2022-23863 | MEDIUM | 6.5 | 1.9% | Jan 28, 2022 | Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password. |
| CVE-2022-24071 | MEDIUM | 4.3 | 0.7% | Jan 28, 2022 | A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which coul... |
| CVE-2022-21720 | MEDIUM | 4.9 | 1.1% | Jan 28, 2022 | GLPI is a free asset and IT management software package. Prior to version 9.5.7, an entity administrator is capable of r... |
| CVE-2022-0394 | MEDIUM | 5.4 | 0.5% | Jan 28, 2022 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now