2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38469 | HIGH | 7.5 | 0.6% | Jan 18, 2023 | An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and ... |
| CVE-2022-41903 | CRITICAL | 9.8 | 44.3% | Jan 17, 2023 | Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` sp... |
| CVE-2022-23521 | CRITICAL | 9.8 | 56.3% | Jan 17, 2023 | Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These ... |
| CVE-2022-41953 | HIGH | 7.8 | 6.8% | Jan 17, 2023 | Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortab... |
| CVE-2022-47929 | MEDIUM | 5.5 | 1.0% | Jan 17, 2023 | In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged... |
| CVE-2022-46475 | CRITICAL | 9.8 | 9.5% | Jan 17, 2023 | D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main... |
| CVE-2022-43977 | CRITICAL | 9.8 | 0.6% | Jan 17, 2023 | An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessibl... |
| CVE-2022-43976 | CRITICAL | 9.8 | 0.7% | Jan 17, 2023 | An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. Direct... |
| CVE-2022-43975 | HIGH | 7.5 | 0.9% | Jan 17, 2023 | An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. A vuln... |
| CVE-2022-40319 | HIGH | 7.5 | 7.2% | Jan 17, 2023 | The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a ... |
| CVE-2022-39195 | MEDIUM | 6.1 | 6.3% | Jan 17, 2023 | A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary ... |
| CVE-2022-2907 | MEDIUM | 6.5 | 0.9% | Jan 17, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions start... |
| CVE-2022-2251 | HIGH | 8 | 1.2% | Jan 17, 2023 | Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and... |
| CVE-2022-23538 | HIGH | 7.6 | 0.7% | Jan 17, 2023 | github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Ser... |
| CVE-2022-4891 | HIGH | 7.5 | 1.3% | Jan 17, 2023 | A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the... |
| CVE-2022-37436 | MEDIUM | 5.3 | 57.9% | Jan 17, 2023 | Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting ... |
| CVE-2022-36760 | CRITICAL | 9 | 1.9% | Jan 17, 2023 | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Se... |
| CVE-2022-47853 | CRITICAL | 9.8 | 1.9% | Jan 17, 2023 | TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacke... |
| CVE-2022-40704 | MEDIUM | 6.1 | 0.6% | Jan 17, 2023 | A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite. |
| CVE-2022-3650 | HIGH | 7.8 | 0.3% | Jan 17, 2023 | A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root... |
| CVE-2022-23739 | CRITICAL | 9.8 | 1.2% | Jan 17, 2023 | An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileg... |
| CVE-2022-4121 | MEDIUM | 5.5 | 0.5% | Jan 17, 2023 | In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found... |
| CVE-2022-41861 | MEDIUM | 6.5 | 1.1% | Jan 17, 2023 | A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which ca... |
| CVE-2022-41860 | HIGH | 7.5 | 1.2% | Jan 17, 2023 | In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the... |
| CVE-2022-41859 | HIGH | 7.5 | 0.9% | Jan 17, 2023 | In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an atta... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now