2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23497 | HIGH | 7.5 | 0.8% | Dec 9, 2022 | FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition... |
| CVE-2022-46157 | HIGH | 8.8 | 1.4% | Dec 9, 2022 | Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119... |
| CVE-2022-44790 | HIGH | 7.5 | 0.6% | Dec 9, 2022 | Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could s... |
| CVE-2022-3724 | HIGH | 7.5 | 2.3% | Dec 9, 2022 | Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or cra... |
| CVE-2022-3259 | HIGH | 7.4 | 0.5% | Dec 9, 2022 | Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks. |
| CVE-2022-44838 | HIGH | 7.2 | 0.7% | Dec 9, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-2752 | HIGH | 7.8 | 0.2% | Dec 9, 2022 | A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under s... |
| CVE-2022-41948 | HIGH | 7.2 | 0.6% | Dec 8, 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affec... |
| CVE-2022-23496 | HIGH | 7.5 | 0.7% | Dec 8, 2022 | Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extra... |
| CVE-2022-23495 | HIGH | 7.5 | 1.3% | Dec 8, 2022 | go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project. ... |
| CVE-2022-4366 | HIGH | 7.5 | 0.7% | Dec 8, 2022 | Missing Authorization in GitHub repository lirantal/daloradius prior to master branch. |
| CVE-2022-46829 | HIGH | 8.8 | 0.4% | Dec 8, 2022 | In JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented. |
| CVE-2022-46828 | HIGH | 7.8 | 0.3% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible. |
| CVE-2022-46824 | HIGH | 7.8 | 0.2% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible. |
| CVE-2022-45525 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInf... |
| CVE-2022-45524 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave. |
| CVE-2022-45523 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im. |
| CVE-2022-45522 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter. |
| CVE-2022-45521 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter. |
| CVE-2022-45520 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting. |
| CVE-2022-45519 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter. |
| CVE-2022-45518 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind. |
| CVE-2022-45517 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer. |
| CVE-2022-45516 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting. |
| CVE-2022-45515 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now