2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22027 | HIGH | 7.8 | 1.8% | Jul 12, 2022 | Windows Fax Service Remote Code Execution Vulnerability |
| CVE-2022-22026 | HIGH | 8.8 | 1.0% | Jul 12, 2022 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
| CVE-2022-22025 | HIGH | 7.5 | 31.6% | Jul 12, 2022 | Windows Internet Information Services Cachuri Module Denial of Service Vulnerability |
| CVE-2022-22024 | HIGH | 7.8 | 1.7% | Jul 12, 2022 | Windows Fax Service Remote Code Execution Vulnerability |
| CVE-2022-22023 | MEDIUM | 6.6 | 0.6% | Jul 12, 2022 | Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability |
| CVE-2022-22022 | HIGH | 7.1 | 0.7% | Jul 12, 2022 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2022-21845 | MEDIUM | 4.7 | 0.6% | Jul 12, 2022 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2022-35403 | HIGH | 7.5 | 6.7% | Jul 12, 2022 | Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 ... |
| CVE-2022-33155 | MEDIUM | 5.4 | 0.4% | Jul 12, 2022 | The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) ... |
| CVE-2022-33154 | MEDIUM | 5.4 | 0.4% | Jul 12, 2022 | The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS. |
| CVE-2022-31105 | CRITICAL | 9.6 | 0.6% | Jul 12, 2022 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.4.0 and prior ... |
| CVE-2022-31102 | MEDIUM | 6.1 | 0.5% | Jul 12, 2022 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6... |
| CVE-2022-29601 | CRITICAL | 9.8 | 0.9% | Jul 12, 2022 | The seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection. |
| CVE-2022-29600 | CRITICAL | 9.8 | 0.9% | Jul 12, 2022 | The oelib (aka One is Enough Library) extension through 4.1.5 for TYPO3 allows SQL Injection. |
| CVE-2022-35228 | HIGH | 8.8 | 0.5% | Jul 12, 2022 | SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would ot... |
| CVE-2022-35227 | MEDIUM | 6.1 | 0.6% | Jul 12, 2022 | A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controll... |
| CVE-2022-35225 | MEDIUM | 6.1 | 0.5% | Jul 12, 2022 | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c... |
| CVE-2022-35224 | MEDIUM | 6.1 | 0.6% | Jul 12, 2022 | SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled ... |
| CVE-2022-35172 | MEDIUM | 6.1 | 0.5% | Jul 12, 2022 | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c... |
| CVE-2022-35171 | MEDIUM | 5.5 | 0.4% | Jul 12, 2022 | When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterpri... |
| CVE-2022-35170 | MEDIUM | 6.1 | 0.5% | Jul 12, 2022 | SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-c... |
| CVE-2022-35169 | MEDIUM | 6 | 0.6% | Jul 12, 2022 | SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege... |
| CVE-2022-35168 | HIGH | 7.5 | 0.7% | Jul 12, 2022 | Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-... |
| CVE-2022-32249 | HIGH | 7.5 | 0.8% | Jul 12, 2022 | Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit... |
| CVE-2022-32248 | MEDIUM | 5.3 | 0.6% | Jul 12, 2022 | Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now