2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22746 | MEDIUM | 5.9 | 0.6% | Dec 22, 2022 | A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window s... |
| CVE-2022-22745 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerabi... |
| CVE-2022-22743 | MEDIUM | 4.3 | 0.6% | Dec 22, 2022 | When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the... |
| CVE-2022-22742 | MEDIUM | 6.5 | 0.8% | Dec 22, 2022 | When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potenti... |
| CVE-2022-22739 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This ... |
| CVE-2022-1834 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple... |
| CVE-2022-1520 | MEDIUM | 4.3 | 0.3% | Dec 22, 2022 | When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both,... |
| CVE-2022-1197 | MEDIUM | 5.4 | 0.4% | Dec 22, 2022 | When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the exis... |
| CVE-2022-1196 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and pote... |
| CVE-2022-1097 | MEDIUM | 6.5 | 0.9% | Dec 22, 2022 | <code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on differ... |
| CVE-2022-23541 | MEDIUM | 6.3 | 0.8% | Dec 22, 2022 | jsonwebtoken is an implementation of JSON Web Tokens. Versions `<= 8.5.1` of `jsonwebtoken` library can be misconfigured... |
| CVE-2022-44510 | MEDIUM | 5.4 | 0.5% | Dec 22, 2022 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
| CVE-2022-41697 | MEDIUM | 5.3 | 20.2% | Dec 22, 2022 | A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted ... |
| CVE-2022-41654 | MEDIUM | 4.3 | 18.9% | Dec 22, 2022 | An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9... |
| CVE-2022-25948 | MEDIUM | 5.3 | 0.8% | Dec 22, 2022 | The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False... |
| CVE-2022-4647 | MEDIUM | 6.1 | 0.5% | Dec 22, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2. |
| CVE-2022-4646 | MEDIUM | 6.5 | 0.3% | Dec 22, 2022 | Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| CVE-2022-43271 | MEDIUM | 5.4 | 0.5% | Dec 22, 2022 | Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerabili... |
| CVE-2022-4644 | MEDIUM | 6.1 | 0.6% | Dec 22, 2022 | Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| CVE-2022-3189 | MEDIUM | 5.3 | 0.5% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script coul... |
| CVE-2022-3188 | MEDIUM | 5.3 | 0.5% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PH... |
| CVE-2022-3187 | MEDIUM | 5.3 | 0.5% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate whe... |
| CVE-2022-3185 | MEDIUM | 5.3 | 0.5% | Dec 21, 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensit... |
| CVE-2022-4642 | MEDIUM | 5.4 | 0.5% | Dec 21, 2022 | A vulnerability was found in tatoeba2. It has been classified as problematic. This affects an unknown part of the compon... |
| CVE-2022-4641 | MEDIUM | 5.5 | 0.2% | Dec 21, 2022 | A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRe... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now