2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34216 | HIGH | 7.8 | 6.1% | Jul 15, 2022 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are ... |
| CVE-2022-34215 | HIGH | 7.8 | 3.3% | Jul 15, 2022 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are ... |
| CVE-2022-23201 | MEDIUM | 6.1 | 0.6% | Jul 15, 2022 | Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a... |
| CVE-2022-23141 | HIGH | 7.5 | 0.7% | Jul 15, 2022 | ZXMP M721 has an information leak vulnerability. Since the serial port authentication on the ZBOOT interface is not effe... |
| CVE-2022-35409 | CRITICAL | 9.1 | 1.8% | Jul 15, 2022 | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attac... |
| CVE-2022-31107 | HIGH | 7.5 | 2.0% | Jul 15, 2022 | Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3... |
| CVE-2022-34826 | MEDIUM | 5.9 | 0.5% | Jul 15, 2022 | In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs. |
| CVE-2022-32119 | HIGH | 8.8 | 2.0% | Jul 15, 2022 | Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo func... |
| CVE-2022-32118 | MEDIUM | 6.1 | 0.9% | Jul 15, 2022 | Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory p... |
| CVE-2022-31097 | HIGH | 8.7 | 68.6% | Jul 15, 2022 | Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch prior to 9.0.3, ... |
| CVE-2022-30245 | MEDIUM | 6.5 | 1.0% | Jul 15, 2022 | Honeywell Alerton Compass Software 1.6.5 allows unauthenticated configuration changes from remote users. This enables co... |
| CVE-2022-30244 | HIGH | 8 | 1.2% | Jul 15, 2022 | Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated programming writes from remote u... |
| CVE-2022-30243 | HIGH | 8.8 | 1.5% | Jul 15, 2022 | Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enab... |
| CVE-2022-30242 | MEDIUM | 6.8 | 1.0% | Jul 15, 2022 | Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remot... |
| CVE-2022-29890 | MEDIUM | 6.1 | 0.4% | Jul 15, 2022 | In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in t... |
| CVE-2022-1881 | MEDIUM | 5.3 | 0.5% | Jul 15, 2022 | In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for... |
| CVE-2022-2420 | HIGH | 8 | 1.0% | Jul 15, 2022 | A vulnerability was found in URVE Web Manager. It has been rated as critical. This issue affects some unknown processing... |
| CVE-2022-2419 | HIGH | 8 | 12.8% | Jul 15, 2022 | A vulnerability was found in URVE Web Manager. It has been declared as critical. This vulnerability affects unknown code... |
| CVE-2022-2418 | HIGH | 8 | 1.1% | Jul 15, 2022 | A vulnerability was found in URVE Web Manager. It has been classified as critical. This affects an unknown part of the f... |
| CVE-2022-34094 | MEDIUM | 6.1 | 2.3% | Jul 14, 2022 | Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability ... |
| CVE-2022-34093 | MEDIUM | 6.1 | 2.3% | Jul 14, 2022 | Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability ... |
| CVE-2022-34092 | MEDIUM | 6.1 | 1.1% | Jul 14, 2022 | Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability ... |
| CVE-2022-32425 | MEDIUM | 5.3 | 0.5% | Jul 14, 2022 | The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's respon... |
| CVE-2022-32417 | CRITICAL | 9.8 | 32.7% | Jul 14, 2022 | PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at ... |
| CVE-2022-32416 | HIGH | 7.2 | 0.8% | Jul 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_product. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now