2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1529 | HIGH | 8.8 | 17.1% | Dec 22, 2022 | An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScri... |
| CVE-2022-0843 | HIGH | 8.8 | 0.6% | Dec 22, 2022 | Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97... |
| CVE-2022-0566 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write o... |
| CVE-2022-0517 | HIGH | 7.8 | 0.2% | Dec 22, 2022 | Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileg... |
| CVE-2022-0511 | HIGH | 8.8 | 0.5% | Dec 22, 2022 | Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, ... |
| CVE-2022-23556 | HIGH | 7.5 | 0.4% | Dec 22, 2022 | CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the... |
| CVE-2022-23540 | HIGH | 7.6 | 0.5% | Dec 22, 2022 | In versions `<=8.5.1` of `jsonwebtoken` library, lack of algorithm definition in the `jwt.verify()` function can lead to... |
| CVE-2022-46101 | HIGH | 8.8 | 1.1% | Dec 22, 2022 | AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command executi... |
| CVE-2022-47896 | HIGH | 7.8 | 0.3% | Dec 22, 2022 | In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks. |
| CVE-2022-47895 | HIGH | 7.5 | 0.2% | Dec 22, 2022 | In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JA... |
| CVE-2022-3186 | HIGH | 7.5 | 0.6% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an atta... |
| CVE-2022-46334 | HIGH | 7.8 | 0.2% | Dec 21, 2022 | Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privil... |
| CVE-2022-4633 | HIGH | 8.8 | 0.3% | Dec 21, 2022 | A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is som... |
| CVE-2022-36222 | HIGH | 8.4 | 0.3% | Dec 21, 2022 | Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5... |
| CVE-2022-4287 | HIGH | 8.8 | 1.0% | Dec 21, 2022 | Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on ... |
| CVE-2022-47581 | HIGH | 7.5 | 0.6% | Dec 21, 2022 | Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request. |
| CVE-2022-38065 | HIGH | 8.8 | 0.6% | Dec 21, 2022 | A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and pri... |
| CVE-2022-38060 | HIGH | 8.8 | 0.2% | Dec 21, 2022 | A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A miscon... |
| CVE-2022-46330 | HIGH | 7.8 | 0.4% | Dec 21, 2022 | Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop... |
| CVE-2022-46282 | HIGH | 7.8 | 0.2% | Dec 21, 2022 | Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a... |
| CVE-2022-25895 | HIGH | 7.5 | 1.3% | Dec 21, 2022 | All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sand... |
| CVE-2022-42949 | HIGH | 7.5 | 0.5% | Dec 21, 2022 | Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions. |
| CVE-2022-42046 | HIGH | 7.8 | 0.5% | Dec 20, 2022 | wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to perform local privilege escalation |
| CVE-2022-46328 | HIGH | 7.5 | 0.4% | Dec 20, 2022 | Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data ... |
| CVE-2022-46322 | HIGH | 7.5 | 0.4% | Dec 20, 2022 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sys... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now