2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4376 | MEDIUM | 4.3 | 0.8% | May 3, 2023 | An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.... |
| CVE-2022-45859 | MEDIUM | 4.4 | 0.1% | May 3, 2023 | An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and... |
| CVE-2022-43950 | MEDIUM | 4.7 | 0.4% | May 3, 2023 | A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC vers... |
| CVE-2022-39161 | MEDIUM | 5.3 | 0.4% | May 3, 2023 | IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to co... |
| CVE-2022-46852 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Table Builder plugin <= 1.4.6 versions. |
| CVE-2022-43681 | MEDIUM | 6.5 | 2.1% | May 3, 2023 | An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message t... |
| CVE-2022-40318 | MEDIUM | 6.5 | 2.0% | May 3, 2023 | An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0x... |
| CVE-2022-40302 | MEDIUM | 6.5 | 2.0% | May 3, 2023 | An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0x... |
| CVE-2022-47877 | MEDIUM | 5.4 | 2.6% | May 2, 2023 | A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web... |
| CVE-2022-47874 | MEDIUM | 6.5 | 22.7% | May 2, 2023 | Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of dat... |
| CVE-2022-33273 | MEDIUM | 5.5 | 0.1% | May 2, 2023 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. |
| CVE-2022-48186 | MEDIUM | 6.2 | 0.3% | May 1, 2023 | A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclos... |
| CVE-2022-45801 | MEDIUM | 5.4 | 1.1% | May 1, 2023 | Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web ba... |
| CVE-2022-43871 | MEDIUM | 5.4 | 0.4% | Apr 29, 2023 | IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability all... |
| CVE-2022-31643 | MEDIUM | 5.5 | 0.2% | Apr 28, 2023 | A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow los... |
| CVE-2022-25091 | MEDIUM | 5.3 | 0.6% | Apr 27, 2023 | Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be dis... |
| CVE-2022-38730 | MEDIUM | 6.3 | 0.3% | Apr 27, 2023 | Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerB... |
| CVE-2022-45876 | MEDIUM | 5.5 | 3.3% | Apr 26, 2023 | Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially craft... |
| CVE-2022-27979 | MEDIUM | 5.4 | 0.5% | Apr 26, 2023 | A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML v... |
| CVE-2022-25278 | MEDIUM | 6.5 | 0.6% | Apr 26, 2023 | Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user... |
| CVE-2022-25276 | MEDIUM | 6.1 | 0.5% | Apr 26, 2023 | The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed ... |
| CVE-2022-25274 | MEDIUM | 5.4 | 0.4% | Apr 26, 2023 | Drupal 9.3 implemented a generic entity access API for entity revisions. However, this API was not completely integrated... |
| CVE-2022-40725 | MEDIUM | 6.1 | 0.2% | Apr 25, 2023 | PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the m... |
| CVE-2022-40723 | MEDIUM | 6.5 | 0.5% | Apr 25, 2023 | The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to M... |
| CVE-2022-40722 | MEDIUM | 5.8 | 0.3% | Apr 25, 2023 | A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now