2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2032 | MEDIUM | 4.8 | 0.4% | Jul 25, 2022 | In Pandora FMS v7.0NG.761 and below, in the file manager section, the dirname parameter is vulnerable to a Stored Cross ... |
| CVE-2022-24992 | HIGH | 7.5 | 1.4% | Jul 25, 2022 | A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal... |
| CVE-2022-34965 | HIGH | 7.2 | 1.5% | Jul 25, 2022 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability... |
| CVE-2022-24083 | CRITICAL | 9.8 | 0.8% | Jul 25, 2022 | Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks. |
| CVE-2022-35653 | MEDIUM | 6.1 | 3.7% | Jul 25, 2022 | A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitizat... |
| CVE-2022-35652 | MEDIUM | 6.1 | 0.9% | Jul 25, 2022 | An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login featu... |
| CVE-2022-35651 | MEDIUM | 6.1 | 0.8% | Jul 25, 2022 | A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied ... |
| CVE-2022-35650 | HIGH | 7.5 | 49.1% | Jul 25, 2022 | The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insuff... |
| CVE-2022-35649 | CRITICAL | 9.8 | 6.3% | Jul 25, 2022 | The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted ... |
| CVE-2022-34964 | MEDIUM | 4.8 | 0.7% | Jul 25, 2022 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu... |
| CVE-2022-34963 | MEDIUM | 5.4 | 0.9% | Jul 25, 2022 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu... |
| CVE-2022-34961 | MEDIUM | 5.4 | 0.9% | Jul 25, 2022 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu... |
| CVE-2022-33965 | CRITICAL | 9.8 | 3.3% | Jul 25, 2022 | Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPre... |
| CVE-2022-2131 | CRITICAL | 9.8 | 0.7% | Jul 25, 2022 | OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file witho... |
| CVE-2022-26307 | HIGH | 8.8 | 1.1% | Jul 25, 2022 | LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passw... |
| CVE-2022-26306 | HIGH | 7.5 | 0.8% | Jul 25, 2022 | LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passw... |
| CVE-2022-26305 | HIGH | 7.5 | 1.0% | Jul 25, 2022 | An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a tru... |
| CVE-2022-2523 | MEDIUM | 6.1 | 0.7% | Jul 25, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2. |
| CVE-2022-2522 | HIGH | 7.8 | 0.6% | Jul 25, 2022 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061. |
| CVE-2022-2514 | MEDIUM | 6.1 | 0.7% | Jul 25, 2022 | The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of err... |
| CVE-2022-21802 | MEDIUM | 6.1 | 0.6% | Jul 25, 2022 | The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the c... |
| CVE-2022-1314 | HIGH | 8.8 | 0.8% | Jul 25, 2022 | Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2022-1313 | HIGH | 8.8 | 0.7% | Jul 25, 2022 | Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit he... |
| CVE-2022-1312 | CRITICAL | 9.6 | 0.5% | Jul 25, 2022 | Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a ... |
| CVE-2022-1311 | HIGH | 8.8 | 0.7% | Jul 25, 2022 | Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially exp... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now