2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47012 | HIGH | 7.5 | 0.9% | Jan 20, 2023 | Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21. |
| CVE-2022-45748 | HIGH | 8.8 | 0.7% | Jan 20, 2023 | An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromCha... |
| CVE-2022-45558 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary co... |
| CVE-2022-45557 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary co... |
| CVE-2022-45542 | MEDIUM | 5.4 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing an... |
| CVE-2022-45541 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the v... |
| CVE-2022-45540 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value conta... |
| CVE-2022-45539 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new f... |
| CVE-2022-45538 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_GOBACK_URL". |
| CVE-2022-45537 | MEDIUM | 6.1 | 0.4% | Jan 20, 2023 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_LIST_URL". |
| CVE-2022-41733 | MEDIUM | 5.3 | 0.7% | Jan 20, 2023 | IBM InfoSphere Information Server 11.7 could allow a remote attacked to cause some of the components to be unusable unt... |
| CVE-2022-39193 | MEDIUM | 5.3 | 0.6% | Jan 20, 2023 | An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension ca... |
| CVE-2022-35977 | MEDIUM | 5.5 | 11.8% | Jan 20, 2023 | Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SETRANGE` and `SORT... |
| CVE-2022-38112 | HIGH | 7.5 | 0.4% | Jan 20, 2023 | In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext. |
| CVE-2022-38110 | MEDIUM | 5.4 | 0.4% | Jan 20, 2023 | In Database Performance Analyzer (DPA) 2022.4 and older releases, certain URL vectors are susceptible to authenticated r... |
| CVE-2022-47747 | HIGH | 7.5 | 0.8% | Jan 20, 2023 | kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs. |
| CVE-2022-47732 | HIGH | 7.5 | 0.5% | Jan 20, 2023 | In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and downl... |
| CVE-2022-43704 | MEDIUM | 5.9 | 1.9% | Jan 20, 2023 | The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requireme... |
| CVE-2022-27918 | — | — | — | Jan 20, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2022-27917 | — | — | — | Jan 20, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2022-27916 | — | — | — | Jan 20, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2022-27915 | — | — | — | Jan 20, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2022-25631 | HIGH | 7.8 | 0.2% | Jan 20, 2023 | Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnera... |
| CVE-2022-48126 | CRITICAL | 9.8 | 2.0% | Jan 20, 2023 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username para... |
| CVE-2022-48125 | CRITICAL | 9.8 | 2.0% | Jan 20, 2023 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password para... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now