2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23519 | MEDIUM | 6.1 | 1.0% | Dec 14, 2022 | rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, a possi... |
| CVE-2022-23518 | MEDIUM | 6.1 | 0.9% | Dec 14, 2022 | rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions >= 1.0.3, < 1.4.4 are ... |
| CVE-2022-23517 | HIGH | 7.5 | 1.5% | Dec 14, 2022 | rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails... |
| CVE-2022-4495 | MEDIUM | 6.1 | 0.5% | Dec 14, 2022 | A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue... |
| CVE-2022-46997 | CRITICAL | 9.8 | 1.1% | Dec 14, 2022 | Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the req... |
| CVE-2022-46996 | CRITICAL | 9.8 | 1.3% | Dec 14, 2022 | vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via ... |
| CVE-2022-46609 | CRITICAL | 9.8 | 1.4% | Dec 14, 2022 | Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was disc... |
| CVE-2022-44898 | HIGH | 7.8 | 0.4% | Dec 14, 2022 | The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x8010... |
| CVE-2022-44832 | CRITICAL | 9.8 | 3.9% | Dec 14, 2022 | D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTrigg... |
| CVE-2022-31358 | CRITICAL | 9 | 1.3% | Dec 14, 2022 | A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attack... |
| CVE-2022-23516 | HIGH | 7.5 | 1.1% | Dec 14, 2022 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri... |
| CVE-2022-23515 | MEDIUM | 6.1 | 0.8% | Dec 14, 2022 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri... |
| CVE-2022-23514 | HIGH | 7.5 | 1.7% | Dec 14, 2022 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri... |
| CVE-2022-23512 | HIGH | 8.1 | 0.8% | Dec 14, 2022 | MeterSphere is a one-stop open source continuous testing platform. Versions prior to 2.4.1 are vulnerable to Path Inject... |
| CVE-2022-4494 | CRITICAL | 9.8 | 0.5% | Dec 14, 2022 | A vulnerability, which was classified as critical, has been found in bspkrs MCPMappingViewer. Affected by this issue is ... |
| CVE-2022-4493 | CRITICAL | 9.8 | 0.5% | Dec 14, 2022 | A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUn... |
| CVE-2022-3590 | MEDIUM | 5.9 | 3.1% | Dec 14, 2022 | WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition betwe... |
| CVE-2022-3073 | MEDIUM | 6.1 | 0.5% | Dec 14, 2022 | Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to... |
| CVE-2022-34271 | HIGH | 8.8 | 1.4% | Dec 14, 2022 | A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This i... |
| CVE-2022-23504 | MEDIUM | 4.9 | 0.5% | Dec 14, 2022 | TYPO3 is an open source PHP based web content management system. Versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1 ... |
| CVE-2022-23503 | HIGH | 8.8 | 0.8% | Dec 14, 2022 | TYPO3 is an open source PHP based web content management system. Versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and... |
| CVE-2022-23502 | MEDIUM | 5.4 | 0.4% | Dec 14, 2022 | TYPO3 is an open source PHP based web content management system. In versions prior to 10.4.33, 11.5.20, and 12.1.1, When... |
| CVE-2022-23501 | MEDIUM | 6.5 | 0.5% | Dec 14, 2022 | TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, ... |
| CVE-2022-23500 | HIGH | 7.5 | 0.7% | Dec 14, 2022 | TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1... |
| CVE-2022-4440 | HIGH | 8.8 | 0.6% | Dec 14, 2022 | Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit hea... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now