2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3832 | MEDIUM | 4.8 | 0.5% | Dec 19, 2022 | The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow h... |
| CVE-2022-4609 | MEDIUM | 5.4 | 0.7% | Dec 19, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. |
| CVE-2022-40743 | MEDIUM | 6.1 | 1.1% | Dec 19, 2022 | Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can le... |
| CVE-2022-47500 | MEDIUM | 6.1 | 1.1% | Dec 19, 2022 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI componen... |
| CVE-2022-44755 | HIGH | 7.8 | 0.7% | Dec 19, 2022 | HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could ... |
| CVE-2022-44754 | HIGH | 7.8 | 0.6% | Dec 19, 2022 | HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could... |
| CVE-2022-44753 | HIGH | 7.8 | 0.6% | Dec 19, 2022 | HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could... |
| CVE-2022-44752 | HIGH | 7.8 | 0.6% | Dec 19, 2022 | HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This coul... |
| CVE-2022-44751 | HIGH | 7.8 | 0.6% | Dec 19, 2022 | HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could ... |
| CVE-2022-44750 | HIGH | 7.8 | 0.6% | Dec 19, 2022 | HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could... |
| CVE-2022-42453 | MEDIUM | 6.5 | 0.3% | Dec 19, 2022 | There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of ... |
| CVE-2022-3877 | MEDIUM | 5.4 | 0.6% | Dec 19, 2022 | A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser... |
| CVE-2022-3876 | MEDIUM | 6.5 | 0.8% | Dec 19, 2022 | A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Br... |
| CVE-2022-3875 | HIGH | 7.5 | 1.0% | Dec 19, 2022 | A vulnerability classified as critical was found in Click Studios Passwordstate and Passwordstate Browser Extension Chro... |
| CVE-2022-38662 | MEDIUM | 6.1 | 0.4% | Dec 19, 2022 | In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites. |
| CVE-2022-38659 | HIGH | 7.8 | 0.1% | Dec 19, 2022 | In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-d... |
| CVE-2022-38653 | MEDIUM | 5.4 | 0.3% | Dec 19, 2022 | In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded... |
| CVE-2022-37392 | MEDIUM | 5.3 | 1.1% | Dec 19, 2022 | Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. T... |
| CVE-2022-32749 | HIGH | 7.5 | 1.3% | Dec 19, 2022 | Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an... |
| CVE-2022-4427 | CRITICAL | 9.8 | 0.7% | Dec 19, 2022 | Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via Tic... |
| CVE-2022-47549 | MEDIUM | 6.4 | 0.4% | Dec 19, 2022 | An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TE... |
| CVE-2022-47547 | MEDIUM | 5.3 | 0.5% | Dec 19, 2022 | GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the net... |
| CVE-2022-46288 | MEDIUM | 6.1 | 0.5% | Dec 19, 2022 | Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to... |
| CVE-2022-46287 | MEDIUM | 6.1 | 0.5% | Dec 19, 2022 | Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated atta... |
| CVE-2022-44456 | CRITICAL | 9.8 | 69.9% | Dec 19, 2022 | CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS com... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now