2022 CVE Vulnerabilities
27,526 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39186 | MEDIUM | 5.5 | 0.2% | Jan 12, 2023 | EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions |
| CVE-2022-39185 | CRITICAL | 9.8 | 0.6% | Jan 12, 2023 | EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user... |
| CVE-2022-39184 | CRITICAL | 9.8 | 0.8% | Jan 12, 2023 | EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication... |
| CVE-2022-39183 | MEDIUM | 6.1 | 0.4% | Jan 12, 2023 | Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors. |
| CVE-2022-39182 | HIGH | 8.8 | 0.3% | Jan 12, 2023 | H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege escalation which may all... |
| CVE-2022-46503 | MEDIUM | 5.4 | 0.4% | Jan 12, 2023 | A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0... |
| CVE-2022-3592 | MEDIUM | 6.5 | 2.4% | Jan 12, 2023 | A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' esca... |
| CVE-2022-3515 | CRITICAL | 9.8 | 1.6% | Jan 12, 2023 | A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can... |
| CVE-2022-3437 | MEDIUM | 6.5 | 3.7% | Jan 12, 2023 | A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines ... |
| CVE-2022-3341 | MEDIUM | 5.3 | 0.8% | Jan 12, 2023 | A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c fil... |
| CVE-2022-2155 | HIGH | 7.1 | 0.4% | Jan 12, 2023 | A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access contro... |
| CVE-2022-47927 | MEDIUM | 5.5 | 0.3% | Jan 12, 2023 | An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When ... |
| CVE-2022-24913 | MEDIUM | 5.5 | 0.2% | Jan 12, 2023 | Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the... |
| CVE-2022-4365 | MEDIUM | 4.3 | 0.7% | Jan 12, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions start... |
| CVE-2022-4345 | MEDIUM | 6.5 | 0.7% | Jan 12, 2023 | Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allow... |
| CVE-2022-4342 | LOW | 3.8 | 0.7% | Jan 12, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions start... |
| CVE-2022-4167 | HIGH | 7.5 | 0.5% | Jan 12, 2023 | Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and ... |
| CVE-2022-4131 | MEDIUM | 5.3 | 0.8% | Jan 12, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions start... |
| CVE-2022-4037 | HIGH | 8.5 | 0.6% | Jan 12, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 befor... |
| CVE-2022-3870 | MEDIUM | 5.3 | 0.7% | Jan 12, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions start... |
| CVE-2022-3613 | HIGH | 7.5 | 1.0% | Jan 12, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 befor... |
| CVE-2022-3573 | MEDIUM | 5.4 | 0.6% | Jan 12, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions start... |
| CVE-2022-3514 | MEDIUM | 5.3 | 0.8% | Jan 12, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starti... |
| CVE-2022-4344 | MEDIUM | 4.3 | 0.6% | Jan 12, 2023 | Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of servic... |
| CVE-2022-4874 | HIGH | 7.5 | 11.0% | Jan 11, 2023 | Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access conte... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now