2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4917 | MEDIUM | 4.3 | 0.3% | Jul 29, 2023 | Incorrect security UI in Notifications in Google Chrome on Android prior to 103.0.5060.53 allowed a remote attacker to o... |
| CVE-2022-4915 | MEDIUM | 6.5 | 0.5% | Jul 29, 2023 | Inappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to per... |
| CVE-2022-4913 | MEDIUM | 6.5 | 0.5% | Jul 29, 2023 | Inappropriate implementation in Extensions in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had com... |
| CVE-2022-4911 | MEDIUM | 6.5 | 0.5% | Jul 29, 2023 | Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass con... |
| CVE-2022-4910 | MEDIUM | 5.4 | 0.4% | Jul 29, 2023 | Inappropriate implementation in Autofill in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass nav... |
| CVE-2022-4909 | MEDIUM | 6.3 | 0.4% | Jul 29, 2023 | Inappropriate implementation in XML in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially per... |
| CVE-2022-4908 | MEDIUM | 4.3 | 0.5% | Jul 29, 2023 | Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak... |
| CVE-2022-31454 | MEDIUM | 6.1 | 0.4% | Jul 28, 2023 | Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this i... |
| CVE-2022-31200 | MEDIUM | 6.1 | 0.4% | Jul 27, 2023 | Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.htm... |
| CVE-2022-31455 | MEDIUM | 6.1 | 0.4% | Jul 26, 2023 | * A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTM... |
| CVE-2022-31456 | MEDIUM | 6.1 | 0.4% | Jul 26, 2023 | A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML ... |
| CVE-2022-43712 | MEDIUM | 6.5 | 0.4% | Jul 26, 2023 | POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are n... |
| CVE-2022-43711 | MEDIUM | 6.1 | 0.3% | Jul 26, 2023 | Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site script... |
| CVE-2022-46900 | MEDIUM | 6.5 | 0.5% | Jul 25, 2023 | An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Ex... |
| CVE-2022-31458 | MEDIUM | 6.1 | 0.4% | Jul 25, 2023 | RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning. |
| CVE-2022-28867 | MEDIUM | 5.4 | 0.4% | Jul 24, 2023 | An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user ... |
| CVE-2022-28865 | MEDIUM | 5.4 | 0.4% | Jul 24, 2023 | An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can cha... |
| CVE-2022-2127 | MEDIUM | 5.9 | 1.5% | Jul 20, 2023 | An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. Wh... |
| CVE-2022-40896 | MEDIUM | 5.5 | 0.5% | Jul 19, 2023 | A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer. |
| CVE-2022-43908 | MEDIUM | 6.5 | 0.6% | Jul 19, 2023 | IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validat... |
| CVE-2022-47421 | MEDIUM | 4.8 | 0.3% | Jul 18, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems... |
| CVE-2022-30858 | MEDIUM | 6.5 | 0.5% | Jul 17, 2023 | An issue was discovered in ngiflib 0.4. There is SEGV in SDL_LoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CA_fi... |
| CVE-2022-4023 | MEDIUM | 5.3 | 0.3% | Jul 17, 2023 | The 3DPrint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File M... |
| CVE-2022-42045 | MEDIUM | 6.7 | 0.6% | Jul 13, 2023 | Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zeman... |
| CVE-2022-46651 | MEDIUM | 6.5 | 0.9% | Jul 12, 2023 | Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access t... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now