2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22274 | CRITICAL | 9.8 | 57.3% | Mar 25, 2022 | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to ... |
| CVE-2022-24784 | LOW | 3.7 | 1.0% | Mar 25, 2022 | Statamic is a Laravel and Git powered CMS. Before versions 3.2.39 and 3.3.2, it is possible to confirm a single characte... |
| CVE-2022-24783 | CRITICAL | 10 | 1.1% | Mar 25, 2022 | Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are ... |
| CVE-2022-26659 | HIGH | 7.1 | 0.4% | Mar 25, 2022 | Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable ... |
| CVE-2022-26197 | MEDIUM | 5.4 | 0.6% | Mar 25, 2022 | Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table. |
| CVE-2022-25523 | HIGH | 8.8 | 0.6% | Mar 25, 2022 | TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST r... |
| CVE-2022-24643 | MEDIUM | 5.4 | 1.2% | Mar 25, 2022 | A stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information Management System version 6... |
| CVE-2022-27920 | MEDIUM | 6.1 | 0.9% | Mar 25, 2022 | libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. ... |
| CVE-2022-27919 | CRITICAL | 9.8 | 1.7% | Mar 25, 2022 | Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial conf... |
| CVE-2022-27906 | MEDIUM | 5.9 | 1.0% | Mar 25, 2022 | Mendelson OFTP2 before 1.1 b43 is affected by directory traversal. To access the vulnerable code path, the attacker has ... |
| CVE-2022-27887 | MEDIUM | 6.1 | 0.5% | Mar 25, 2022 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.h... |
| CVE-2022-27886 | MEDIUM | 6.1 | 0.5% | Mar 25, 2022 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index... |
| CVE-2022-27885 | MEDIUM | 6.1 | 0.5% | Mar 25, 2022 | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/w... |
| CVE-2022-27884 | MEDIUM | 6.1 | 0.5% | Mar 25, 2022 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index... |
| CVE-2022-26573 | MEDIUM | 6.1 | 0.6% | Mar 25, 2022 | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/a... |
| CVE-2022-25612 | MEDIUM | 5.4 | 0.5% | Mar 25, 2022 | Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in Simple Event Planner WordPress plugin <=... |
| CVE-2022-25611 | MEDIUM | 5.4 | 0.5% | Mar 25, 2022 | Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributo... |
| CVE-2022-25610 | MEDIUM | 6.1 | 0.7% | Mar 25, 2022 | Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malici... |
| CVE-2022-25606 | MEDIUM | 5.4 | 0.5% | Mar 25, 2022 | Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plug... |
| CVE-2022-25590 | MEDIUM | 6.5 | 1.5% | Mar 25, 2022 | SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the syste... |
| CVE-2022-1049 | HIGH | 8.8 | 1.8% | Mar 25, 2022 | A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts w... |
| CVE-2022-0995 | HIGH | 7.8 | 6.3% | Mar 25, 2022 | An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This ... |
| CVE-2022-0988 | HIGH | 7.5 | 0.5% | Mar 25, 2022 | Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application ru... |
| CVE-2022-0983 | HIGH | 8.8 | 0.9% | Mar 25, 2022 | An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability ... |
| CVE-2022-0897 | MEDIUM | 4.3 | 1.0% | Mar 25, 2022 | A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the drive... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now