2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1226 | MEDIUM | 4.8 | 0.4% | Nov 15, 2024 | A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitr... |
| CVE-2022-2232 | HIGH | 7.5 | 0.6% | Nov 14, 2024 | A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the userna... |
| CVE-2022-31671 | HIGH | 7.4 | 0.5% | Nov 14, 2024 | Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution... |
| CVE-2022-31670 | HIGH | 7.7 | 0.5% | Nov 14, 2024 | Harbor fails to validate the user permissions when updating tag retention policies. By sending a request to update a t... |
| CVE-2022-31669 | HIGH | 7.7 | 0.4% | Nov 14, 2024 | Harbor fails to validate the user permissions when updating tag immutability policies. By sending a request to update ... |
| CVE-2022-31668 | HIGH | 7.7 | 0.3% | Nov 14, 2024 | Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to update a p2p p... |
| CVE-2022-31667 | MEDIUM | 6.4 | 0.5% | Nov 14, 2024 | Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authentic... |
| CVE-2022-31666 | MEDIUM | 5.4 | 0.5% | Nov 14, 2024 | Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and ... |
| CVE-2022-45157 | CRITICAL | 9.1 | 0.4% | Nov 13, 2024 | A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Con... |
| CVE-2022-30361 | MEDIUM | 5.3 | 0.4% | Oct 25, 2024 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserTy... |
| CVE-2022-30360 | MEDIUM | 6.4 | 0.3% | Oct 25, 2024 | OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST r... |
| CVE-2022-30359 | MEDIUM | 4.3 | 0.3% | Oct 25, 2024 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserLi... |
| CVE-2022-30358 | HIGH | 8.8 | 0.5% | Oct 25, 2024 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword... |
| CVE-2022-30357 | HIGH | 8.8 | 0.3% | Oct 25, 2024 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfi... |
| CVE-2022-30356 | MEDIUM | 4.7 | 0.4% | Oct 25, 2024 | OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserr... |
| CVE-2022-30355 | CRITICAL | 9.8 | 0.5% | Oct 25, 2024 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfi... |
| CVE-2022-30354 | HIGH | 7.5 | 0.5% | Oct 25, 2024 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWi... |
| CVE-2022-23862 | HIGH | 7.8 | 0.5% | Oct 22, 2024 | A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696... |
| CVE-2022-23861 | MEDIUM | 5.4 | 0.5% | Oct 22, 2024 | Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the ... |
| CVE-2022-49033 | MEDIUM | 5.5 | 0.2% | Oct 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug i... |
| CVE-2022-49032 | HIGH | 7.1 | 0.2% | Oct 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4404: Fix oob read in afe4404_[read... |
| CVE-2022-49031 | HIGH | 7.1 | 0.2% | Oct 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403_read_... |
| CVE-2022-49030 | HIGH | 7.8 | 0.3% | Oct 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The ... |
| CVE-2022-49029 | HIGH | 7.8 | 0.2% | Oct 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_regist... |
| CVE-2022-49028 | MEDIUM | 5.5 | 0.2% | Oct 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevf_init_module()... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now