2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4806 | MEDIUM | 5.3 | 0.8% | Dec 28, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4805 | MEDIUM | 4.3 | 0.5% | Dec 28, 2022 | Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4804 | MEDIUM | 5.3 | 0.6% | Dec 28, 2022 | Improper Authorization in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4803 | HIGH | 8.8 | 0.8% | Dec 28, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4802 | MEDIUM | 5.4 | 0.6% | Dec 28, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4801 | MEDIUM | 5.3 | 0.7% | Dec 28, 2022 | Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4800 | MEDIUM | 6.5 | 0.6% | Dec 28, 2022 | Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4799 | MEDIUM | 6.5 | 0.8% | Dec 28, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4798 | MEDIUM | 5.3 | 0.7% | Dec 28, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4797 | MEDIUM | 4.3 | 0.7% | Dec 28, 2022 | Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4796 | HIGH | 8.1 | 0.8% | Dec 28, 2022 | Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-3922 | MEDIUM | 4.8 | 0.5% | Dec 28, 2022 | The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could a... |
| CVE-2022-46179 | HIGH | 7.8 | 0.3% | Dec 28, 2022 | LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of... |
| CVE-2022-46174 | MEDIUM | 4.2 | 0.6% | Dec 28, 2022 | efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the... |
| CVE-2022-46173 | MEDIUM | 6.5 | 0.7% | Dec 28, 2022 | Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing i... |
| CVE-2022-46172 | MEDIUM | 6.4 | 0.5% | Dec 28, 2022 | authentik is an open-source Identity provider focused on flexibility and versatility. In versions prior to 2022.10.4, an... |
| CVE-2022-3347 | HIGH | 7.5 | 0.2% | Dec 28, 2022 | DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for inv... |
| CVE-2022-3346 | MEDIUM | 6.5 | 0.2% | Dec 28, 2022 | DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for inv... |
| CVE-2022-23555 | HIGH | 8.8 | 0.9% | Dec 28, 2022 | authentik is an open-source Identity Provider focused on flexibility and versatility. Versions prior to 2022.11.4 and 20... |
| CVE-2022-4773 | LOW | 3.3 | 0.4% | Dec 28, 2022 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in cloudsync. Affected by this vulne... |
| CVE-2022-41967 | HIGH | 7.5 | 0.6% | Dec 28, 2022 | Dragonfly is a Java runtime dependency management library. Dragonfly v0.3.0-SNAPSHOT does not configure DocumentBuilderF... |
| CVE-2022-41966 | HIGH | 7.5 | 8.7% | Dec 28, 2022 | XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate... |
| CVE-2022-23544 | MEDIUM | 6.1 | 1.6% | Dec 28, 2022 | MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testi... |
| CVE-2022-4772 | HIGH | 7.8 | 0.3% | Dec 27, 2022 | A vulnerability was found in Widoco and classified as critical. Affected by this issue is the function unZipIt of the fi... |
| CVE-2022-4768 | CRITICAL | 9.8 | 0.7% | Dec 27, 2022 | A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function add_public_key ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now