2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42316 | MEDIUM | 6.5 | 0.2% | Nov 1, 2022 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp... |
| CVE-2022-42315 | MEDIUM | 6.5 | 0.2% | Nov 1, 2022 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp... |
| CVE-2022-42314 | MEDIUM | 6.5 | 0.2% | Nov 1, 2022 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp... |
| CVE-2022-42313 | MEDIUM | 6.5 | 0.2% | Nov 1, 2022 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp... |
| CVE-2022-42312 | MEDIUM | 6.5 | 0.2% | Nov 1, 2022 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp... |
| CVE-2022-42311 | MEDIUM | 6.5 | 0.2% | Nov 1, 2022 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp... |
| CVE-2022-42310 | MEDIUM | 5.5 | 0.3% | Nov 1, 2022 | Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an erro... |
| CVE-2022-3369 | MEDIUM | 5.5 | 0.2% | Nov 1, 2022 | An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows,... |
| CVE-2022-41553 | MEDIUM | 5.5 | 0.2% | Nov 1, 2022 | Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linu... |
| CVE-2022-3191 | MEDIUM | 5.5 | 0.2% | Nov 1, 2022 | Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage S... |
| CVE-2022-40295 | MEDIUM | 4.9 | 0.4% | Oct 31, 2022 | The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user... |
| CVE-2022-40292 | MEDIUM | 5.3 | 0.5% | Oct 31, 2022 | The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve info... |
| CVE-2022-40290 | MEDIUM | 6.1 | 0.4% | Oct 31, 2022 | The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode ... |
| CVE-2022-3783 | MEDIUM | 6.1 | 0.6% | Oct 31, 2022 | A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unkn... |
| CVE-2022-39020 | MEDIUM | 6.1 | 0.4% | Oct 31, 2022 | Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student as... |
| CVE-2022-39017 | MEDIUM | 5.4 | 0.4% | Oct 31, 2022 | Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows auth... |
| CVE-2022-42924 | MEDIUM | 6.5 | 0.4% | Oct 31, 2022 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vuln... |
| CVE-2022-41680 | MEDIUM | 6.5 | 0.3% | Oct 31, 2022 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vuln... |
| CVE-2022-41679 | MEDIUM | 6.1 | 0.5% | Oct 31, 2022 | Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote att... |
| CVE-2022-3499 | MEDIUM | 6.5 | 0.8% | Oct 31, 2022 | An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a sce... |
| CVE-2022-44081 | MEDIUM | 5.5 | 0.3% | Oct 31, 2022 | Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail. |
| CVE-2022-44079 | MEDIUM | 5.5 | 0.3% | Oct 31, 2022 | pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component __san... |
| CVE-2022-43152 | MEDIUM | 5.5 | 0.3% | Oct 31, 2022 | tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitS... |
| CVE-2022-43151 | MEDIUM | 5.5 | 0.3% | Oct 31, 2022 | timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-quer... |
| CVE-2022-43148 | MEDIUM | 5.5 | 0.3% | Oct 31, 2022 | rtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtf_tools.h. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now