2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4770 | MEDIUM | 4.3 | 0.4% | Apr 3, 2023 | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the fu... |
| CVE-2022-4769 | MEDIUM | 4.3 | 0.4% | Apr 3, 2023 | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the ta... |
| CVE-2022-43941 | MEDIUM | 6.5 | 0.5% | Apr 3, 2023 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly... |
| CVE-2022-43772 | MEDIUM | 6.5 | 0.4% | Apr 3, 2023 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Dat... |
| CVE-2022-43771 | MEDIUM | 6.5 | 23.9% | Apr 3, 2023 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Penta... |
| CVE-2022-3960 | MEDIUM | 6.3 | 0.5% | Apr 3, 2023 | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a... |
| CVE-2022-27665 | MEDIUM | 6.1 | 33.1% | Apr 3, 2023 | Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead ... |
| CVE-2022-42452 | MEDIUM | 5.4 | 0.3% | Apr 2, 2023 | HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to ... |
| CVE-2022-3192 | MEDIUM | 5.3 | 0.6% | Mar 31, 2023 | Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affe... |
| CVE-2022-43473 | MEDIUM | 5.4 | 19.8% | Mar 30, 2023 | A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.... |
| CVE-2022-1274 | MEDIUM | 5.4 | 0.7% | Mar 29, 2023 | A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into... |
| CVE-2022-47602 | MEDIUM | 5.4 | 0.4% | Mar 29, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in JoomUnited WP Table Manager plugin <= 3.5.2 vers... |
| CVE-2022-44369 | MEDIUM | 5.5 | 0.3% | Mar 29, 2023 | NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c. |
| CVE-2022-44368 | MEDIUM | 5.5 | 0.3% | Mar 29, 2023 | NASM v2.16 was discovered to contain a null pointer deference in the NASM component |
| CVE-2022-47613 | MEDIUM | 4.8 | 0.4% | Mar 29, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions. |
| CVE-2022-47610 | MEDIUM | 4.8 | 0.4% | Mar 29, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions... |
| CVE-2022-47607 | MEDIUM | 4.8 | 0.4% | Mar 29, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Usersnap plugin <= 4.16 versions. |
| CVE-2022-47603 | MEDIUM | 6.1 | 0.4% | Mar 29, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails... |
| CVE-2022-43640 | MEDIUM | 5.5 | 0.9% | Mar 29, 2023 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read... |
| CVE-2022-43635 | MEDIUM | 6.5 | 0.6% | Mar 29, 2023 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-L... |
| CVE-2022-43633 | MEDIUM | 6.8 | 1.1% | Mar 29, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1... |
| CVE-2022-43632 | MEDIUM | 6.8 | 1.1% | Mar 29, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1... |
| CVE-2022-43631 | MEDIUM | 6.8 | 1.1% | Mar 29, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1... |
| CVE-2022-43629 | MEDIUM | 6.8 | 1.1% | Mar 29, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1... |
| CVE-2022-43628 | MEDIUM | 6.8 | 1.1% | Mar 29, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now