2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43696 | MEDIUM | 6.1 | 0.4% | Apr 15, 2023 | OX App Suite before 7.10.6-rev20 allows XSS via upsell ads. |
| CVE-2022-48178 | MEDIUM | 5.4 | 1.8% | Apr 15, 2023 | X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via ... |
| CVE-2022-48177 | MEDIUM | 5.4 | 1.8% | Apr 15, 2023 | X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability v... |
| CVE-2022-46886 | MEDIUM | 6.1 | 0.3% | Apr 14, 2023 | There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redi... |
| CVE-2022-45180 | MEDIUM | 6.5 | 0.7% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdes... |
| CVE-2022-45175 | MEDIUM | 6.5 | 0.7% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under... |
| CVE-2022-45170 | MEDIUM | 6.5 | 0.4% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/v... |
| CVE-2022-48468 | MEDIUM | 5.5 | 0.4% | Apr 13, 2023 | protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member. |
| CVE-2022-45358 | MEDIUM | 5.4 | 0.4% | Apr 13, 2023 | Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions. |
| CVE-2022-44625 | MEDIUM | 4.8 | 0.4% | Apr 13, 2023 | Auth. (admin+) Stored Cross-Site Scripting') vulnerability in Zephilou Cyklodev WP Notify plugin <= 1.2.1 versions. |
| CVE-2022-33297 | MEDIUM | 5.5 | 0.1% | Apr 13, 2023 | Information disclosure due to buffer overread in Linux sensors |
| CVE-2022-33289 | MEDIUM | 6.8 | 0.2% | Apr 13, 2023 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. |
| CVE-2022-33270 | MEDIUM | 5.9 | 0.3% | Apr 13, 2023 | Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message. |
| CVE-2022-47053 | MEDIUM | 5.4 | 0.4% | Apr 12, 2023 | An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 all... |
| CVE-2022-24350 | MEDIUM | 5.5 | 0.2% | Apr 12, 2023 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that t... |
| CVE-2022-48437 | MEDIUM | 5.3 | 0.4% | Apr 12, 2023 | An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verif... |
| CVE-2022-43955 | MEDIUM | 6.1 | 0.6% | Apr 11, 2023 | An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.... |
| CVE-2022-43952 | MEDIUM | 5.4 | 0.4% | Apr 11, 2023 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiA... |
| CVE-2022-42477 | MEDIUM | 5.5 | 0.2% | Apr 11, 2023 | An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6... |
| CVE-2022-42469 | MEDIUM | 4.3 | 0.4% | Apr 11, 2023 | A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and belo... |
| CVE-2022-41330 | MEDIUM | 6.1 | 0.6% | Apr 11, 2023 | An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortin... |
| CVE-2022-35850 | MEDIUM | 6.1 | 0.5% | Apr 11, 2023 | An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versio... |
| CVE-2022-27485 | MEDIUM | 6.5 | 0.6% | Apr 11, 2023 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortine... |
| CVE-2022-3695 | MEDIUM | 6.1 | 0.4% | Apr 11, 2023 | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL... |
| CVE-2022-47468 | MEDIUM | 5.5 | 0.1% | Apr 11, 2023 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now