2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40167 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40166 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40165 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40164 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40163 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40162 | — | — | — | Jan 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-40037 | CRITICAL | 9.8 | 1.8% | Jan 26, 2023 | An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary command... |
| CVE-2022-40036 | MEDIUM | 6.5 | 0.7% | Jan 26, 2023 | An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing pe... |
| CVE-2022-40035 | HIGH | 8.8 | 1.2% | Jan 26, 2023 | File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escal... |
| CVE-2022-3924 | HIGH | 7.5 | 16.4% | Jan 26, 2023 | This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-cl... |
| CVE-2022-3902 | MEDIUM | 6.4 | 0.7% | Jan 26, 2023 | An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting fro... |
| CVE-2022-3820 | MEDIUM | 6.5 | 0.7% | Jan 26, 2023 | An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5... |
| CVE-2022-3740 | MEDIUM | 4.9 | 0.9% | Jan 26, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3.5, 15.4 prior to 15... |
| CVE-2022-3736 | HIGH | 7.5 | 50.2% | Jan 26, 2023 | BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to... |
| CVE-2022-3572 | MEDIUM | 6.1 | 1.1% | Jan 26, 2023 | A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions from 13.5 prior to 15.3.5, 15.4 ... |
| CVE-2022-3488 | HIGH | 7.5 | 19.0% | Jan 26, 2023 | Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first... |
| CVE-2022-3482 | MEDIUM | 5.3 | 1.0% | Jan 26, 2023 | An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4,... |
| CVE-2022-3478 | MEDIUM | 4.3 | 1.0% | Jan 26, 2023 | An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting fr... |
| CVE-2022-3432 | MEDIUM | 6.7 | 0.3% | Jan 26, 2023 | A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly no... |
| CVE-2022-3094 | HIGH | 7.5 | 13.1% | Jan 26, 2023 | Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `... |
| CVE-2022-38775 | HIGH | 7.8 | 0.3% | Jan 26, 2023 | An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged... |
| CVE-2022-38774 | HIGH | 7.8 | 0.3% | Jan 26, 2023 | An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which co... |
| CVE-2022-38758 | MEDIUM | 6.1 | 0.4% | Jan 26, 2023 | Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious s... |
| CVE-2022-34405 | HIGH | 7.3 | 0.3% | Jan 26, 2023 | An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious use... |
| CVE-2022-31711 | MEDIUM | 5.3 | 21.7% | Jan 26, 2023 | VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sen... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now