2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46403 | HIGH | 8.6 | 0.8% | Dec 19, 2022 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject... |
| CVE-2022-46402 | MEDIUM | 6.5 | 0.5% | Dec 19, 2022 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_r... |
| CVE-2022-46401 | MEDIUM | 5.4 | 0.7% | Dec 19, 2022 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncR... |
| CVE-2022-46400 | MEDIUM | 5.4 | 0.6% | Dec 19, 2022 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers ... |
| CVE-2022-46399 | HIGH | 7.5 | 0.7% | Dec 19, 2022 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive w... |
| CVE-2022-44109 | CRITICAL | 9.8 | 1.0% | Dec 19, 2022 | pdftojson commit 94204bb was discovered to contain a stack overflow via the component Stream::makeFilter(char*, Stream*,... |
| CVE-2022-44108 | CRITICAL | 9.8 | 1.0% | Dec 19, 2022 | pdftojson commit 94204bb was discovered to contain a stack overflow via the component Object::copy(Object*):Object.cc. |
| CVE-2022-3752 | HIGH | 7.5 | 1.2% | Dec 19, 2022 | An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loadin... |
| CVE-2022-44940 | CRITICAL | 9.1 | 1.0% | Dec 19, 2022 | Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc. |
| CVE-2022-40434 | CRITICAL | 9.8 | 1.3% | Dec 19, 2022 | Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page. |
| CVE-2022-23543 | MEDIUM | 5.4 | 0.3% | Dec 19, 2022 | Silverware Games is a social network where people can play games online. Users can attach URLs to YouTube videos, the si... |
| CVE-2022-23536 | MEDIUM | 6.5 | 0.8% | Dec 19, 2022 | Cortex provides multi-tenant, long term storage for Prometheus. A local file inclusion vulnerability exists in Cortex ve... |
| CVE-2022-45041 | HIGH | 7.5 | 0.8% | Dec 19, 2022 | SQL Injection exits in xinhu < 2.5.0 |
| CVE-2022-43887 | MEDIUM | 5.3 | 0.5% | Dec 19, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API ke... |
| CVE-2022-43883 | HIGH | 7.5 | 0.6% | Dec 19, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs from... |
| CVE-2022-39160 | MEDIUM | 6.1 | 0.4% | Dec 19, 2022 | IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2022-38708 | CRITICAL | 9.1 | 0.4% | Dec 19, 2022 | IBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attac... |
| CVE-2022-4615 | MEDIUM | 6.1 | 0.7% | Dec 19, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2. |
| CVE-2022-4614 | MEDIUM | 5.4 | 0.4% | Dec 19, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository alagrede/znote-app prior to 1.7.11. |
| CVE-2022-44488 | MEDIUM | 5.4 | 0.5% | Dec 19, 2022 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect... |
| CVE-2022-44474 | MEDIUM | 5.4 | 0.5% | Dec 19, 2022 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
| CVE-2022-44471 | MEDIUM | 5.4 | 0.5% | Dec 19, 2022 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
| CVE-2022-44470 | MEDIUM | 5.4 | 0.5% | Dec 19, 2022 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
| CVE-2022-44467 | MEDIUM | 5.4 | 0.5% | Dec 19, 2022 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
| CVE-2022-44466 | MEDIUM | 5.4 | 0.5% | Dec 19, 2022 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now