2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-3916MEDIUM6.8A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especi...
CVE-2022-1438MEDIUM4.8A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, r...
CVE-2022-45448MEDIUM6.1M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document craftin...
CVE-2022-45447MEDIUM6.5M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to a directory traversal vulnerabilit...
CVE-2022-47561MEDIUM5.5The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into...
CVE-2022-47560MEDIUM6.5The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to ...
CVE-2022-47557MEDIUM6.1Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located...
CVE-2022-47556MEDIUM6.5Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web server to send ...
CVE-2022-3466MEDIUM5.3The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316...
CVE-2022-20917MEDIUM4.3A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber coul...
CVE-2022-47637MEDIUM6.7The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory. Common use cases execute fi...
CVE-2022-34238MEDIUM5.5Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 20.005.30334 (and earlier) are affect...
CVE-2022-22409MEDIUM5.3IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application, caused ...
CVE-2022-22402MEDIUM5.4IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc...
CVE-2022-22405MEDIUM5.9IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly...
CVE-2022-27599MEDIUM4.4An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the...
CVE-2022-32920MEDIUM5.5The issue was addressed with improved checks. This issue is fixed in Xcode 14.0. Parsing a file may lead to disclosure o...
CVE-2022-33220MEDIUM5.5Information disclosure in Automotive multimedia due to buffer over-read.
CVE-2022-43903MEDIUM6.5IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to ...
CVE-2022-48453MEDIUM4.4In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial...
CVE-2022-48452MEDIUM4.4In Ifaa service, there is a possible missing permission check. This could lead to local denial of service with System ex...
CVE-2022-47353MEDIUM4.4In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of ser...
CVE-2022-47352MEDIUM4.4In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial ...
CVE-2022-3407MEDIUM4.3I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with...
CVE-2022-22305MEDIUM4.2An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyz...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now