2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-29471MEDIUM4.3Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain th...
CVE-2022-29467MEDIUM4.3Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote authenticated attacker to o...
CVE-2022-28718MEDIUM4.3Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated atta...
CVE-2022-28713MEDIUM5.3Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain s...
CVE-2022-28692MEDIUM4.3Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attac...
CVE-2022-27807MEDIUM4.3Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker t...
CVE-2022-27803MEDIUM4.3Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker ...
CVE-2022-27661MEDIUM4.3Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated att...
CVE-2022-27627MEDIUM6.1Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attack...
CVE-2022-26368MEDIUM5.4Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allo...
CVE-2022-26054MEDIUM4.3Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacke...
CVE-2022-26051MEDIUM4.3Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attac...
CVE-2022-34151HIGH8.1Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earl...
CVE-2022-33971HIGH7.5Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.2...
CVE-2022-33948HIGH8.8HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHC...
CVE-2022-33208HIGH8.1Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.4...
CVE-2022-32284HIGH7.5Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Com...
CVE-2022-2289HIGH7.8Use After Free in GitHub repository vim/vim prior to 9.0.
CVE-2022-2288HIGH7.8Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.
CVE-2022-2290MEDIUM6.1Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.
CVE-2022-2287HIGH7.1Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-34913CRITICAL9.8md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to...
CVE-2022-34912MEDIUM6.1An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Co...
CVE-2022-34911MEDIUM6.1An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can o...
CVE-2022-2286HIGH7.8Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now