2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22297 | MEDIUM | 5.5 | 0.2% | Mar 7, 2023 | An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpr... |
| CVE-2022-4932 | MEDIUM | 4.3 | 0.6% | Mar 7, 2023 | The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13. ... |
| CVE-2022-4931 | MEDIUM | 4.3 | 0.5% | Mar 7, 2023 | The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12. ... |
| CVE-2022-3854 | MEDIUM | 6.5 | 0.6% | Mar 6, 2023 | A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by ... |
| CVE-2022-3707 | MEDIUM | 5.5 | 0.2% | Mar 6, 2023 | A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resour... |
| CVE-2022-3277 | MEDIUM | 6.5 | 1.1% | Mar 6, 2023 | An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user t... |
| CVE-2022-42248 | MEDIUM | 5.4 | 0.4% | Mar 6, 2023 | QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functi... |
| CVE-2022-4930 | MEDIUM | 5.4 | 0.5% | Mar 6, 2023 | A vulnerability classified as problematic was found in nuxsmin sysPass up to 3.2.4. Affected by this vulnerability is an... |
| CVE-2022-48364 | MEDIUM | 4.3 | 0.7% | Mar 6, 2023 | The undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does... |
| CVE-2022-2178 | MEDIUM | 6.1 | 0.4% | Mar 6, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saysis Computer St... |
| CVE-2022-44875 | MEDIUM | 5.4 | 0.6% | Mar 6, 2023 | KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows at... |
| CVE-2022-4929 | MEDIUM | 6.1 | 0.5% | Mar 6, 2023 | A vulnerability was found in icplayer up to 0.818. It has been rated as problematic. Affected by this issue is some unkn... |
| CVE-2022-4928 | MEDIUM | 6.1 | 0.5% | Mar 6, 2023 | A vulnerability was found in icplayer up to 0.819. It has been declared as problematic. Affected by this vulnerability i... |
| CVE-2022-4927 | MEDIUM | 6.1 | 0.5% | Mar 5, 2023 | A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unk... |
| CVE-2022-4645 | MEDIUM | 5.5 | 0.4% | Mar 3, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service... |
| CVE-2022-2837 | MEDIUM | 6.1 | 0.4% | Mar 3, 2023 | A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domai... |
| CVE-2022-2835 | MEDIUM | 4.4 | 0.2% | Mar 3, 2023 | A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that ... |
| CVE-2022-40633 | MEDIUM | 4.6 | 0.3% | Mar 2, 2023 | A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks. |
| CVE-2022-35645 | MEDIUM | 5.4 | 0.5% | Mar 2, 2023 | IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stor... |
| CVE-2022-4901 | MEDIUM | 6.1 | 0.3% | Mar 1, 2023 | Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the loc... |
| CVE-2022-48310 | MEDIUM | 5.5 | 0.1% | Mar 1, 2023 | An information disclosure vulnerability allows sensitive key material to be included in technical support archives in So... |
| CVE-2022-48309 | MEDIUM | 4.3 | 0.3% | Mar 1, 2023 | A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect version... |
| CVE-2022-3162 | MEDIUM | 6.5 | 1.2% | Mar 1, 2023 | Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a dif... |
| CVE-2022-39228 | MEDIUM | 6.5 | 0.6% | Mar 1, 2023 | vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform... |
| CVE-2022-36021 | MEDIUM | 5.5 | 59.7% | Mar 1, 2023 | Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now