2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21719 | MEDIUM | 6.1 | 1.0% | Jan 28, 2022 | GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cr... |
| CVE-2022-0348 | MEDIUM | 5.4 | 0.6% | Jan 27, 2022 | Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2. |
| CVE-2022-0372 | MEDIUM | 5.4 | 0.6% | Jan 27, 2022 | Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2. |
| CVE-2022-0387 | MEDIUM | 5.4 | 0.6% | Jan 27, 2022 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. |
| CVE-2022-0370 | MEDIUM | 5.4 | 0.8% | Jan 27, 2022 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. |
| CVE-2022-22852 | MEDIUM | 5.4 | 0.8% | Jan 26, 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System... |
| CVE-2022-23993 | MEDIUM | 6.1 | 1.5% | Jan 26, 2022 | /usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP ec... |
| CVE-2022-22850 | MEDIUM | 5.4 | 0.7% | Jan 26, 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System... |
| CVE-2022-22851 | MEDIUM | 5.4 | 0.6% | Jan 26, 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System... |
| CVE-2022-0379 | MEDIUM | 5.4 | 0.9% | Jan 26, 2022 | Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-0378 | MEDIUM | 5.4 | 3.9% | Jan 26, 2022 | Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-0203 | MEDIUM | 5.3 | 1.2% | Jan 26, 2022 | Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2. |
| CVE-2022-22932 | MEDIUM | 5.3 | 2.8% | Jan 26, 2022 | Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out... |
| CVE-2022-0251 | MEDIUM | 5.4 | 0.7% | Jan 26, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10. |
| CVE-2022-0375 | MEDIUM | 4.8 | 0.7% | Jan 26, 2022 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. |
| CVE-2022-0374 | MEDIUM | 5.4 | 0.7% | Jan 26, 2022 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. |
| CVE-2022-23258 | MEDIUM | 4.3 | 1.6% | Jan 25, 2022 | Microsoft Edge for Android Spoofing Vulnerability |
| CVE-2022-23032 | MEDIUM | 5.3 | 0.4% | Jan 25, 2022 | In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system... |
| CVE-2022-23031 | MEDIUM | 4.9 | 0.8% | Jan 25, 2022 | On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an... |
| CVE-2022-23030 | MEDIUM | 5.3 | 0.9% | Jan 25, 2022 | On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BI... |
| CVE-2022-23029 | MEDIUM | 5.3 | 0.7% | Jan 25, 2022 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x... |
| CVE-2022-23028 | MEDIUM | 5.3 | 0.9% | Jan 25, 2022 | On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when... |
| CVE-2022-23027 | MEDIUM | 5.3 | 0.9% | Jan 25, 2022 | On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6... |
| CVE-2022-23026 | MEDIUM | 4.3 | 0.7% | Jan 25, 2022 | On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versi... |
| CVE-2022-23023 | MEDIUM | 6.5 | 0.9% | Jan 25, 2022 | On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 1... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now