2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46907 | MEDIUM | 6.1 | 1.2% | May 25, 2023 | A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could... |
| CVE-2022-30025 | MEDIUM | 6.5 | 0.8% | May 24, 2023 | SQL injection in "/Framewrk/Home.jsp" file (POST method) in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows aut... |
| CVE-2022-42225 | MEDIUM | 5.4 | 0.7% | May 24, 2023 | Jumpserver 2.10.0 <= version <= 2.26.0 contains multiple stored XSS vulnerabilities because of improper filtering of use... |
| CVE-2022-4945 | MEDIUM | 6.5 | 0.2% | May 22, 2023 | The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this spec... |
| CVE-2022-0010 | MEDIUM | 5.5 | 0.2% | May 22, 2023 | Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering... |
| CVE-2022-36328 | MEDIUM | 4.9 | 0.8% | May 18, 2023 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacke... |
| CVE-2022-36326 | MEDIUM | 4.9 | 0.6% | May 18, 2023 | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to co... |
| CVE-2022-47157 | MEDIUM | 4.8 | 0.4% | May 18, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <= 1.2.34 ... |
| CVE-2022-4870 | MEDIUM | 5.3 | 0.4% | May 18, 2023 | In affected versions of Octopus Deploy it is possible to discover network details via error message |
| CVE-2022-45144 | MEDIUM | 6.1 | 0.7% | May 17, 2023 | Algoo Tracim before 4.4.2 allows XSS via HTML file upload. |
| CVE-2022-47393 | MEDIUM | 6.5 | 1.0% | May 15, 2023 | An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vuln... |
| CVE-2022-47392 | MEDIUM | 6.5 | 0.9% | May 15, 2023 | An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce C... |
| CVE-2022-47378 | MEDIUM | 6.5 | 0.9% | May 15, 2023 | Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated ... |
| CVE-2022-22508 | MEDIUM | 4.3 | 0.7% | May 15, 2023 | Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block... |
| CVE-2022-48020 | MEDIUM | 6.1 | 0.6% | May 12, 2023 | Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference par... |
| CVE-2022-47880 | MEDIUM | 5.3 | 3.2% | May 12, 2023 | An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users wi... |
| CVE-2022-29840 | MEDIUM | 5.5 | 0.1% | May 10, 2023 | Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL ... |
| CVE-2022-46645 | MEDIUM | 5.5 | 0.2% | May 10, 2023 | Uncontrolled resource consumption in the Intel(R) Smart Campus Android application before version 9.9 may allow an authe... |
| CVE-2022-46279 | MEDIUM | 5.5 | 0.2% | May 10, 2023 | Improper access control in the Intel(R) Retail Edge android application before version 3.0.301126-RELEASE may allow an a... |
| CVE-2022-45128 | MEDIUM | 5.5 | 0.2% | May 10, 2023 | Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentiall... |
| CVE-2022-43465 | MEDIUM | 5.5 | 0.2% | May 10, 2023 | Improper authorization in the Intel(R) SCS software all versions may allow an authenticated user to potentially enable d... |
| CVE-2022-42878 | MEDIUM | 5.5 | 0.2% | May 10, 2023 | Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2... |
| CVE-2022-42465 | MEDIUM | 6.7 | 0.2% | May 10, 2023 | Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privilege... |
| CVE-2022-41808 | MEDIUM | 5.5 | 0.2% | May 10, 2023 | Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authen... |
| CVE-2022-41801 | MEDIUM | 5.5 | 0.2% | May 10, 2023 | Uncontrolled resource consumption in the Intel(R) Connect M Android application before version 1.82 may allow an authent... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now