2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38765 | MEDIUM | 6.5 | 0.5% | Dec 9, 2022 | Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is a... |
| CVE-2022-41948 | HIGH | 7.2 | 0.6% | Dec 8, 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affec... |
| CVE-2022-41947 | MEDIUM | 5.4 | 0.4% | Dec 8, 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Throu... |
| CVE-2022-46158 | MEDIUM | 4.3 | 0.5% | Dec 8, 2022 | PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem ac... |
| CVE-2022-46153 | MEDIUM | 6.5 | 0.5% | Dec 8, 2022 | Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability ... |
| CVE-2022-41949 | MEDIUM | 4.3 | 0.4% | Dec 8, 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. In af... |
| CVE-2022-33186 | CRITICAL | 9.8 | 1.7% | Dec 8, 2022 | A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remo... |
| CVE-2022-23496 | HIGH | 7.5 | 0.7% | Dec 8, 2022 | Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extra... |
| CVE-2022-23495 | HIGH | 7.5 | 1.3% | Dec 8, 2022 | go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project. ... |
| CVE-2022-23494 | MEDIUM | 6.1 | 0.9% | Dec 8, 2022 | tinymce is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in the alert and c... |
| CVE-2022-23469 | MEDIUM | 6.5 | 1.0% | Dec 8, 2022 | Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulne... |
| CVE-2022-44938 | CRITICAL | 9.8 | 1.0% | Dec 8, 2022 | Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brut... |
| CVE-2022-41717 | MEDIUM | 5.3 | 5.6% | Dec 8, 2022 | An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contai... |
| CVE-2022-4366 | HIGH | 7.5 | 0.7% | Dec 8, 2022 | Missing Authorization in GitHub repository lirantal/daloradius prior to master branch. |
| CVE-2022-46831 | MEDIUM | 4.9 | 0.4% | Dec 8, 2022 | In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allo... |
| CVE-2022-46830 | MEDIUM | 5.3 | 0.5% | Dec 8, 2022 | In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning. |
| CVE-2022-46829 | HIGH | 8.8 | 0.4% | Dec 8, 2022 | In JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented. |
| CVE-2022-46828 | HIGH | 7.8 | 0.3% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible. |
| CVE-2022-46827 | MEDIUM | 5.5 | 0.2% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was po... |
| CVE-2022-46826 | MEDIUM | 5.5 | 0.2% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a pa... |
| CVE-2022-46825 | LOW | 3.3 | 0.1% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects. |
| CVE-2022-46824 | HIGH | 7.8 | 0.2% | Dec 8, 2022 | In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible. |
| CVE-2022-40939 | MEDIUM | 4.9 | 0.4% | Dec 8, 2022 | In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B201711... |
| CVE-2022-38599 | MEDIUM | 6.5 | 0.8% | Dec 8, 2022 | Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user... |
| CVE-2022-4123 | LOW | 3.3 | 0.2% | Dec 8, 2022 | A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now