2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-35692 | MEDIUM | 5.3 | 0.7% | Aug 19, 2022 | Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improp... |
| CVE-2022-35554 | MEDIUM | 6.1 | 0.6% | Aug 19, 2022 | Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an at... |
| CVE-2022-2793 | HIGH | 7.8 | 0.1% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity... |
| CVE-2022-2792 | HIGH | 7.5 | 0.4% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and ... |
| CVE-2022-2790 | MEDIUM | 5.9 | 0.1% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryp... |
| CVE-2022-2789 | MEDIUM | 5.5 | 0.1% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of ... |
| CVE-2022-36233 | MEDIUM | 5.5 | 0.3% | Aug 19, 2022 | Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd. |
| CVE-2022-36171 | HIGH | 8.1 | 0.6% | Aug 19, 2022 | MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion. |
| CVE-2022-36157 | HIGH | 8.8 | 1.2% | Aug 19, 2022 | XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin... |
| CVE-2022-37175 | CRITICAL | 9.8 | 0.9% | Aug 19, 2022 | Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. |
| CVE-2022-36170 | HIGH | 8.8 | 0.8% | Aug 19, 2022 | MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitra... |
| CVE-2022-36031 | MEDIUM | 6.5 | 0.8% | Aug 19, 2022 | Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by... |
| CVE-2022-36009 | HIGH | 8.8 | 0.7% | Aug 19, 2022 | gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alte... |
| CVE-2022-36008 | MEDIUM | 6.5 | 0.9% | Aug 19, 2022 | Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC resul... |
| CVE-2022-2788 | HIGH | 7.3 | 0.2% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename'... |
| CVE-2022-23460 | HIGH | 7.5 | 0.6% | Aug 19, 2022 | Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lea... |
| CVE-2022-23459 | CRITICAL | 9.8 | 0.8% | Aug 19, 2022 | Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value cla... |
| CVE-2022-22489 | CRITICAL | 9.1 | 1.4% | Aug 19, 2022 | IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack wh... |
| CVE-2022-0542 | MEDIUM | 6.1 | 0.8% | Aug 19, 2022 | Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0. |
| CVE-2022-37254 | MEDIUM | 5.4 | 0.4% | Aug 19, 2022 | DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configura... |
| CVE-2022-36579 | HIGH | 8.8 | 0.4% | Aug 19, 2022 | Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF). |
| CVE-2022-36578 | CRITICAL | 9.8 | 0.8% | Aug 19, 2022 | jizhicms v2.3.1 has SQL injection in the background. |
| CVE-2022-36577 | HIGH | 8.8 | 0.4% | Aug 19, 2022 | An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin. |
| CVE-2022-36225 | HIGH | 8.8 | 0.4% | Aug 19, 2022 | EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management functio... |
| CVE-2022-36224 | HIGH | 8.8 | 0.4% | Aug 19, 2022 | XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF). |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now