2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1163 | MEDIUM | 4.8 | 3.5% | Mar 30, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next. |
| CVE-2022-28202 | MEDIUM | 6.1 | 1.2% | Mar 30, 2022 | An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight,... |
| CVE-2022-27816 | HIGH | 7.1 | 0.5% | Mar 30, 2022 | SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. |
| CVE-2022-24693 | CRITICAL | 9.8 | 3.3% | Mar 30, 2022 | Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily d... |
| CVE-2022-27815 | HIGH | 7.8 | 0.5% | Mar 30, 2022 | SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service. |
| CVE-2022-27432 | HIGH | 8.8 | 0.6% | Mar 30, 2022 | A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by ex... |
| CVE-2022-26951 | MEDIUM | 6.1 | 0.5% | Mar 30, 2022 | Archer 6.x through 6.10 (6.10.0.0) contains a reflected XSS vulnerability. A remote SAML-unauthenticated malicious Arche... |
| CVE-2022-26950 | MEDIUM | 6.1 | 0.5% | Mar 30, 2022 | Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote unprivileged attacker may po... |
| CVE-2022-26949 | MEDIUM | 6.5 | 0.9% | Mar 30, 2022 | Archer 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on attachments. A remote authe... |
| CVE-2022-26948 | HIGH | 7.5 | 0.6% | Mar 30, 2022 | The Archer RSS feed integration for Archer 6.x through 6.9 SP1 (6.9.1.0) is affected by an insecure credential storage v... |
| CVE-2022-26947 | MEDIUM | 5.4 | 0.6% | Mar 30, 2022 | Archer 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability. A remote authenticated malicious Archer use... |
| CVE-2022-26244 | MEDIUM | 5.4 | 0.5% | Mar 30, 2022 | A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to ... |
| CVE-2022-26871 | CRITICAL | 9.8 | 19.6% | Mar 29, 2022 | An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upl... |
| CVE-2022-21821 | HIGH | 7.8 | 2.0% | Mar 29, 2022 | NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote ... |
| CVE-2022-22948 | MEDIUM | 6.5 | 13.9% | Mar 29, 2022 | The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious act... |
| CVE-2022-1122 | MEDIUM | 5.5 | 1.1% | Mar 29, 2022 | A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large... |
| CVE-2022-27175 | CRITICAL | 9.8 | 1.2% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in G... |
| CVE-2022-26887 | CRITICAL | 9.8 | 9.5% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_l... |
| CVE-2022-26839 | HIGH | 7.8 | 0.2% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the ... |
| CVE-2022-26836 | CRITICAL | 9.8 | 1.2% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in H... |
| CVE-2022-26667 | CRITICAL | 9.8 | 1.2% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in G... |
| CVE-2022-26666 | CRITICAL | 9.8 | 1.2% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handle... |
| CVE-2022-26514 | CRITICAL | 9.8 | 1.2% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in D... |
| CVE-2022-26349 | CRITICAL | 9.8 | 1.2% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in D... |
| CVE-2022-26338 | CRITICAL | 9.8 | 1.2% | Mar 29, 2022 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handle... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now