2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22815 | MEDIUM | 6.5 | 2.6% | Jan 10, 2022 | path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. |
| CVE-2022-22702 | MEDIUM | 4.3 | 0.7% | Jan 10, 2022 | PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not va... |
| CVE-2022-22701 | MEDIUM | 6.5 | 1.0% | Jan 10, 2022 | PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://'... |
| CVE-2022-22289 | MEDIUM | 5.3 | 0.8% | Jan 10, 2022 | Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive infor... |
| CVE-2022-22287 | MEDIUM | 4.6 | 0.2% | Jan 10, 2022 | Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox. |
| CVE-2022-22284 | MEDIUM | 5.5 | 0.2% | Jan 10, 2022 | Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode pass... |
| CVE-2022-22271 | MEDIUM | 5.5 | 0.1% | Jan 10, 2022 | A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy ... |
| CVE-2022-22268 | MEDIUM | 6.1 | 0.1% | Jan 10, 2022 | Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporar... |
| CVE-2022-22263 | MEDIUM | 5.5 | 0.1% | Jan 10, 2022 | Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arbi... |
| CVE-2022-21823 | MEDIUM | 5.5 | 0.3% | Jan 10, 2022 | A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control <2021.2 (10.7.30.0) that co... |
| CVE-2022-21662 | MEDIUM | 5.4 | 64.7% | Jan 6, 2022 | WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-pri... |
| CVE-2022-22707 | MEDIUM | 5.9 | 9.0% | Jan 6, 2022 | In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based ... |
| CVE-2022-0122 | MEDIUM | 6.1 | 0.8% | Jan 6, 2022 | forge is vulnerable to URL Redirection to Untrusted Site |
| CVE-2022-21651 | MEDIUM | 6.1 | 0.8% | Jan 5, 2022 | Shopware is an open source e-commerce software platform. An open redirect vulnerability has been discovered. Users may b... |
| CVE-2022-21642 | MEDIUM | 4.3 | 0.7% | Jan 5, 2022 | Discourse is an open source platform for community discussion. In affected versions when composing a message from topic ... |
| CVE-2022-22109 | MEDIUM | 5.4 | 0.5% | Jan 5, 2022 | In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileg... |
| CVE-2022-22108 | MEDIUM | 4.3 | 0.7% | Jan 5, 2022 | In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest p... |
| CVE-2022-22107 | MEDIUM | 4.3 | 0.7% | Jan 5, 2022 | In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest p... |
| CVE-2022-21650 | MEDIUM | 5.4 | 0.8% | Jan 4, 2022 | Convos is an open source multi-user chat that runs in a web browser. You can't use SVG extension in Convos' chat window,... |
| CVE-2022-21649 | MEDIUM | 5.4 | 0.9% | Jan 4, 2022 | Convos is an open source multi-user chat that runs in a web browser. Characters starting with "https://" in the chat win... |
| CVE-2022-21648 | MEDIUM | 6.1 | 0.8% | Jan 4, 2022 | Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affec... |
| CVE-2022-20023 | MEDIUM | 6.5 | 0.3% | Jan 4, 2022 | In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This cou... |
| CVE-2022-20022 | MEDIUM | 6.5 | 0.3% | Jan 4, 2022 | In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from... |
| CVE-2022-20021 | MEDIUM | 6.5 | 0.3% | Jan 4, 2022 | In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple ... |
| CVE-2022-20020 | MEDIUM | 5.5 | 0.1% | Jan 4, 2022 | In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local info... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now