2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4413 | MEDIUM | 6.1 | 0.5% | Dec 12, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13. |
| CVE-2022-4409 | HIGH | 7.5 | 0.4% | Dec 11, 2022 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9. |
| CVE-2022-4408 | MEDIUM | 5.4 | 0.5% | Dec 11, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9. |
| CVE-2022-4407 | MEDIUM | 6.1 | 4.4% | Dec 11, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9. |
| CVE-2022-4403 | HIGH | 8.8 | 0.6% | Dec 11, 2022 | A vulnerability classified as critical was found in SourceCodester Canteen Management System. This vulnerability affects... |
| CVE-2022-4402 | HIGH | 7.2 | 0.7% | Dec 11, 2022 | A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the co... |
| CVE-2022-4401 | MEDIUM | 5.4 | 0.4% | Dec 11, 2022 | A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected... |
| CVE-2022-4400 | MEDIUM | 6.1 | 0.4% | Dec 11, 2022 | A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing o... |
| CVE-2022-4399 | CRITICAL | 9.8 | 0.7% | Dec 10, 2022 | A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unkno... |
| CVE-2022-4398 | HIGH | 7.8 | 0.3% | Dec 10, 2022 | Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0. |
| CVE-2022-4397 | MEDIUM | 6.5 | 0.2% | Dec 10, 2022 | A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown f... |
| CVE-2022-45145 | CRITICAL | 9.8 | 1.3% | Dec 10, 2022 | egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape... |
| CVE-2022-4396 | MEDIUM | 5.4 | 0.6% | Dec 10, 2022 | A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option o... |
| CVE-2022-23485 | LOW | 3.7 | 0.4% | Dec 10, 2022 | Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11... |
| CVE-2022-23510 | HIGH | 8.8 | 0.9% | Dec 9, 2022 | cube-js is a headless business intelligence platform. In version 0.31.23 all authenticated Cube clients could bypass SQL... |
| CVE-2022-23497 | HIGH | 7.5 | 0.8% | Dec 9, 2022 | FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition... |
| CVE-2022-45292 | MEDIUM | 5.3 | 0.5% | Dec 9, 2022 | User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an a... |
| CVE-2022-34297 | MEDIUM | 5.4 | 0.6% | Dec 9, 2022 | Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field. |
| CVE-2022-46166 | CRITICAL | 9.8 | 1.4% | Dec 9, 2022 | Spring boot admins is an open source administrative user interface for management of spring boot applications. All users... |
| CVE-2022-46157 | HIGH | 8.8 | 1.4% | Dec 9, 2022 | Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119... |
| CVE-2022-44790 | HIGH | 7.5 | 0.6% | Dec 9, 2022 | Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could s... |
| CVE-2022-4390 | CRITICAL | 10 | 0.9% | Dec 9, 2022 | A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 ... |
| CVE-2022-2993 | CRITICAL | 9.8 | 0.6% | Dec 9, 2022 | There is an error in the condition of the last if-statement in the function smp_check_keys. It was rejecting current key... |
| CVE-2022-45290 | CRITICAL | 9.1 | 0.9% | Dec 9, 2022 | Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController... |
| CVE-2022-41299 | MEDIUM | 5.4 | 0.3% | Dec 9, 2022 | IBM Cloud Transformation Advisor 2.0.1 through 3.3.1 is vulnerable to cross-site scripting. This vulnerability allows us... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now