2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4687 | HIGH | 8.1 | 0.6% | Dec 23, 2022 | Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0. |
| CVE-2022-4686 | CRITICAL | 9.8 | 0.7% | Dec 23, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0. |
| CVE-2022-4685 | — | — | — | Dec 23, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. Al... |
| CVE-2022-4684 | HIGH | 8.8 | 0.6% | Dec 23, 2022 | Improper Access Control in GitHub repository usememos/memos prior to 0.9.0. |
| CVE-2022-4683 | MEDIUM | 6.5 | 0.4% | Dec 23, 2022 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0. |
| CVE-2022-33324 | HIGH | 7.5 | 1.7% | Dec 23, 2022 | Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU F... |
| CVE-2022-4665 | HIGH | 8.8 | 0.8% | Dec 23, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6. |
| CVE-2022-46492 | MEDIUM | 6.5 | 0.5% | Dec 23, 2022 | nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via... |
| CVE-2022-47931 | CRITICAL | 9.1 | 0.5% | Dec 23, 2022 | IO FinNet tss-lib before 2.0.0 allows a collision of hash values. |
| CVE-2022-40899 | HIGH | 7.5 | 1.8% | Dec 23, 2022 | An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service vi... |
| CVE-2022-40898 | HIGH | 7.5 | 2.7% | Dec 23, 2022 | An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a den... |
| CVE-2022-40897 | MEDIUM | 5.9 | 2.6% | Dec 23, 2022 | Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML... |
| CVE-2022-23539 | HIGH | 8.1 | 0.5% | Dec 23, 2022 | Versions `<=8.5.1` of `jsonwebtoken` library could be misconfigured so that legacy, insecure key types are used for sign... |
| CVE-2022-23513 | MEDIUM | 5.3 | 40.2% | Dec 23, 2022 | Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. I... |
| CVE-2022-47928 | MEDIUM | 6.1 | 0.4% | Dec 22, 2022 | In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp. |
| CVE-2022-46493 | CRITICAL | 9.8 | 0.8% | Dec 22, 2022 | Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/do... |
| CVE-2022-46491 | MEDIUM | 6.5 | 0.3% | Dec 22, 2022 | A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allo... |
| CVE-2022-4662 | MEDIUM | 5.5 | 0.3% | Dec 22, 2022 | A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A ... |
| CVE-2022-43603 | MEDIUM | 5.9 | 1.3% | Dec 22, 2022 | A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2... |
| CVE-2022-43602 | HIGH | 8.1 | 1.9% | Dec 22, 2022 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO... |
| CVE-2022-43601 | HIGH | 8.1 | 1.7% | Dec 22, 2022 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO... |
| CVE-2022-43600 | HIGH | 8.1 | 1.7% | Dec 22, 2022 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO... |
| CVE-2022-43599 | HIGH | 8.1 | 2.0% | Dec 22, 2022 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO... |
| CVE-2022-43598 | HIGH | 8.1 | 1.8% | Dec 22, 2022 | Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project... |
| CVE-2022-43597 | HIGH | 8.1 | 1.8% | Dec 22, 2022 | Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now