2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4640 | MEDIUM | 5.4 | 0.4% | Dec 21, 2022 | A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is t... |
| CVE-2022-4639 | CRITICAL | 9.8 | 0.9% | Dec 21, 2022 | A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of th... |
| CVE-2022-4638 | MEDIUM | 6.1 | 0.4% | Dec 21, 2022 | A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects ... |
| CVE-2022-4637 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipu... |
| CVE-2022-46334 | HIGH | 7.8 | 0.2% | Dec 21, 2022 | Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privil... |
| CVE-2022-23529 | — | — | — | Dec 21, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The issue is not a vulnerability. Notes: no... |
| CVE-2022-23551 | MEDIUM | 5.3 | 0.7% | Dec 21, 2022 | aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of ... |
| CVE-2022-4633 | HIGH | 8.8 | 0.3% | Dec 21, 2022 | A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is som... |
| CVE-2022-4632 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnera... |
| CVE-2022-4631 | MEDIUM | 6.1 | 0.4% | Dec 21, 2022 | A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file b... |
| CVE-2022-46096 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows... |
| CVE-2022-46095 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulne... |
| CVE-2022-36222 | HIGH | 8.4 | 0.3% | Dec 21, 2022 | Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5... |
| CVE-2022-36221 | MEDIUM | 6.5 | 0.8% | Dec 21, 2022 | Nokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to rea... |
| CVE-2022-4630 | MEDIUM | 5.3 | 0.6% | Dec 21, 2022 | Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master. |
| CVE-2022-40841 | MEDIUM | 6.1 | 0.5% | Dec 21, 2022 | A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrar... |
| CVE-2022-4287 | HIGH | 8.8 | 1.0% | Dec 21, 2022 | Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on ... |
| CVE-2022-47581 | HIGH | 7.5 | 0.6% | Dec 21, 2022 | Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request. |
| CVE-2022-44756 | MEDIUM | 6.5 | 0.4% | Dec 21, 2022 | Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information d... |
| CVE-2022-42454 | MEDIUM | 5.3 | 0.2% | Dec 21, 2022 | Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information dis... |
| CVE-2022-38655 | MEDIUM | 5.8 | 0.4% | Dec 21, 2022 | BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixl... |
| CVE-2022-40145 | CRITICAL | 9.8 | 2.4% | Dec 21, 2022 | This vulnerable is about a potential code injection when an attacker has control of the target LDAP server using in the ... |
| CVE-2022-38065 | HIGH | 8.8 | 0.6% | Dec 21, 2022 | A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and pri... |
| CVE-2022-38060 | HIGH | 8.8 | 0.2% | Dec 21, 2022 | A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A miscon... |
| CVE-2022-46662 | MEDIUM | 6.7 | 0.4% | Dec 21, 2022 | Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains sp... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now