2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45142 | HIGH | 7.5 | 0.5% | Mar 6, 2023 | The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!=... |
| CVE-2022-45141 | CRITICAL | 9.8 | 0.5% | Mar 6, 2023 | Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and pe... |
| CVE-2022-3857 | — | — | — | Mar 6, 2023 | Rejected reason: Maintainer contacted. This is a false-positive. The flaw does not actually exist and was erroneously te... |
| CVE-2022-3854 | MEDIUM | 6.5 | 0.6% | Mar 6, 2023 | A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by ... |
| CVE-2022-3707 | MEDIUM | 5.5 | 0.2% | Mar 6, 2023 | A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resour... |
| CVE-2022-3424 | HIGH | 7.8 | 0.2% | Mar 6, 2023 | A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl functi... |
| CVE-2022-3277 | MEDIUM | 6.5 | 1.1% | Mar 6, 2023 | An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user t... |
| CVE-2022-42248 | MEDIUM | 5.4 | 0.4% | Mar 6, 2023 | QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functi... |
| CVE-2022-4930 | MEDIUM | 5.4 | 0.5% | Mar 6, 2023 | A vulnerability classified as problematic was found in nuxsmin sysPass up to 3.2.4. Affected by this vulnerability is an... |
| CVE-2022-4328 | CRITICAL | 9.8 | 4.4% | Mar 6, 2023 | The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could ... |
| CVE-2022-4265 | HIGH | 8.8 | 0.5% | Mar 6, 2023 | The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiatin... |
| CVE-2022-48364 | MEDIUM | 4.3 | 0.7% | Mar 6, 2023 | The undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does... |
| CVE-2022-46395 | HIGH | 8.8 | 2.7% | Mar 6, 2023 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operat... |
| CVE-2022-2178 | MEDIUM | 6.1 | 0.4% | Mar 6, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saysis Computer St... |
| CVE-2022-4862 | HIGH | 7.6 | 0.4% | Mar 6, 2023 | Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. Thi... |
| CVE-2022-3284 | HIGH | 7.5 | 0.7% | Mar 6, 2023 | Download key for a file in a vault was passed in an insecure way that could easily be logged in M-Files New Web in M-Fil... |
| CVE-2022-44875 | MEDIUM | 5.4 | 0.6% | Mar 6, 2023 | KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows at... |
| CVE-2022-4929 | MEDIUM | 6.1 | 0.5% | Mar 6, 2023 | A vulnerability was found in icplayer up to 0.818. It has been rated as problematic. Affected by this issue is some unkn... |
| CVE-2022-4928 | MEDIUM | 6.1 | 0.5% | Mar 6, 2023 | A vulnerability was found in icplayer up to 0.819. It has been declared as problematic. Affected by this vulnerability i... |
| CVE-2022-4927 | MEDIUM | 6.1 | 0.5% | Mar 5, 2023 | A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unk... |
| CVE-2022-46973 | CRITICAL | 9.8 | 0.8% | Mar 3, 2023 | Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability. |
| CVE-2022-4645 | MEDIUM | 5.5 | 0.4% | Mar 3, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service... |
| CVE-2022-41862 | LOW | 3.7 | 0.6% | Mar 3, 2023 | In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos t... |
| CVE-2022-2837 | MEDIUM | 6.1 | 0.4% | Mar 3, 2023 | A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domai... |
| CVE-2022-2835 | MEDIUM | 4.4 | 0.2% | Mar 3, 2023 | A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now