2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46442 | CRITICAL | 9.8 | 0.6% | Dec 27, 2022 | dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query. |
| CVE-2022-45963 | CRITICAL | 9.8 | 0.7% | Dec 27, 2022 | h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability. |
| CVE-2022-45778 | CRITICAL | 9.8 | 0.7% | Dec 27, 2022 | https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 <= 5.0.4.0 is vulnerable to Incorrect Access Control. There ... |
| CVE-2022-3064 | HIGH | 7.5 | 1.7% | Dec 27, 2022 | Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory. |
| CVE-2022-2584 | HIGH | 7.5 | 0.7% | Dec 27, 2022 | The dag-pb codec can panic when decoding invalid blocks. |
| CVE-2022-2583 | LOW | 3.7 | 0.3% | Dec 27, 2022 | A race condition can cause incorrect HTTP request routing. |
| CVE-2022-2582 | MEDIUM | 4.3 | 0.5% | Dec 27, 2022 | The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash... |
| CVE-2022-3156 | HIGH | 7.8 | 0.4% | Dec 27, 2022 | A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are grant... |
| CVE-2022-47968 | MEDIUM | 5.4 | 0.4% | Dec 27, 2022 | Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add applicat... |
| CVE-2022-45434 | MEDIUM | 5.9 | 0.7% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. Af... |
| CVE-2022-45433 | LOW | 3.7 | 0.6% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypas... |
| CVE-2022-45432 | MEDIUM | 5.3 | 0.7% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall ac... |
| CVE-2022-45431 | HIGH | 7.5 | 0.6% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the f... |
| CVE-2022-45430 | LOW | 3.7 | 0.4% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. After bypassing the... |
| CVE-2022-45429 | HIGH | 7.5 | 0.5% | Dec 27, 2022 | Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal... |
| CVE-2022-45428 | LOW | 2.7 | 0.7% | Dec 27, 2022 | Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of a... |
| CVE-2022-45427 | HIGH | 7.2 | 0.7% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of adm... |
| CVE-2022-45426 | MEDIUM | 6.5 | 0.6% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of o... |
| CVE-2022-45425 | HIGH | 7.5 | 0.5% | Dec 27, 2022 | Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the A... |
| CVE-2022-45424 | MEDIUM | 5.3 | 0.7% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain t... |
| CVE-2022-45423 | HIGH | 7.5 | 0.6% | Dec 27, 2022 | Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. An attacker can obtain... |
| CVE-2022-4767 | HIGH | 7.5 | 0.7% | Dec 27, 2022 | Denial of Service in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4734 | MEDIUM | 4.3 | 0.8% | Dec 27, 2022 | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1.... |
| CVE-2022-4733 | MEDIUM | 4.8 | 0.6% | Dec 27, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2. |
| CVE-2022-4732 | HIGH | 7.2 | 38.2% | Dec 27, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now