2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-31459 | MEDIUM | 6.5 | 0.8% | Jun 2, 2022 | Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth. |
| CVE-2022-32250 | HIGH | 7.8 | 2.9% | Jun 2, 2022 | net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces... |
| CVE-2022-29718 | MEDIUM | 6.1 | 1.0% | Jun 2, 2022 | Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this ... |
| CVE-2022-29085 | MEDIUM | 6.7 | 0.2% | Jun 2, 2022 | Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulne... |
| CVE-2022-29084 | CRITICAL | 9.8 | 1.8% | Jun 2, 2022 | Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication atte... |
| CVE-2022-26869 | CRITICAL | 9.8 | 1.8% | Jun 2, 2022 | Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated atta... |
| CVE-2022-26868 | HIGH | 7.8 | 0.4% | Jun 2, 2022 | Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated ... |
| CVE-2022-26867 | HIGH | 8 | 0.6% | Jun 2, 2022 | PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, with... |
| CVE-2022-26866 | MEDIUM | 5.5 | 0.4% | Jun 2, 2022 | Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged networ... |
| CVE-2022-22557 | HIGH | 7.8 | 0.2% | Jun 2, 2022 | PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x ... |
| CVE-2022-22556 | HIGH | 7.5 | 1.2% | Jun 2, 2022 | Dell PowerStore contains an Uncontrolled Resource Consumption Vulnerability in PowerStore User Interface. A remote unaut... |
| CVE-2022-31024 | MEDIUM | 6.5 | 0.6% | Jun 2, 2022 | richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.... |
| CVE-2022-32019 | CRITICAL | 9.8 | 2.4% | Jun 2, 2022 | Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.... |
| CVE-2022-31023 | HIGH | 7.5 | 1.2% | Jun 2, 2022 | Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error mess... |
| CVE-2022-30429 | MEDIUM | 5.4 | 0.6% | Jun 2, 2022 | Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject... |
| CVE-2022-29704 | CRITICAL | 9.8 | 1.2% | Jun 2, 2022 | BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability. |
| CVE-2022-29597 | MEDIUM | 6.5 | 1.9% | Jun 2, 2022 | Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local File Inclusion (LFI). Any authenticated... |
| CVE-2022-26944 | MEDIUM | 6.5 | 0.9% | Jun 2, 2022 | Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include ... |
| CVE-2022-26497 | MEDIUM | 5.4 | 0.8% | Jun 2, 2022 | BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The pa... |
| CVE-2022-25163 | CRITICAL | 9.8 | 2.1% | Jun 2, 2022 | Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial numb... |
| CVE-2022-1982 | MEDIUM | 6.5 | 0.8% | Jun 2, 2022 | Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the ... |
| CVE-2022-1980 | MEDIUM | 4.8 | 0.6% | Jun 2, 2022 | A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue aff... |
| CVE-2022-1979 | MEDIUM | 4.8 | 0.6% | Jun 2, 2022 | A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulner... |
| CVE-2022-1716 | MEDIUM | 4.6 | 0.4% | Jun 2, 2022 | Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's passw... |
| CVE-2022-31018 | HIGH | 7.5 | 1.6% | Jun 2, 2022 | Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now