2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46742 | CRITICAL | 9.8 | 1.1% | Dec 7, 2022 | Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. |
| CVE-2022-46741 | CRITICAL | 9.1 | 0.7% | Dec 7, 2022 | Out-of-bounds read in gather_tree in PaddlePaddle before 2.4. |
| CVE-2022-4322 | HIGH | 7.2 | 0.8% | Dec 7, 2022 | A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecu... |
| CVE-2022-45122 | MEDIUM | 6.1 | 0.5% | Dec 7, 2022 | Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Ty... |
| CVE-2022-45113 | MEDIUM | 6.5 | 0.6% | Dec 7, 2022 | Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to acces... |
| CVE-2022-44620 | HIGH | 8.8 | 0.9% | Dec 7, 2022 | Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earli... |
| CVE-2022-44608 | HIGH | 7.5 | 0.9% | Dec 7, 2022 | Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated at... |
| CVE-2022-44606 | HIGH | 8.8 | 1.5% | Dec 7, 2022 | OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier ... |
| CVE-2022-43668 | MEDIUM | 6.1 | 0.4% | Dec 7, 2022 | Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript co... |
| CVE-2022-43667 | HIGH | 7.8 | 0.3% | Dec 7, 2022 | Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disc... |
| CVE-2022-43660 | HIGH | 7.2 | 1.0% | Dec 7, 2022 | Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authentic... |
| CVE-2022-43509 | HIGH | 7.8 | 0.2% | Dec 7, 2022 | Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure a... |
| CVE-2022-43508 | HIGH | 7.8 | 0.2% | Dec 7, 2022 | Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or... |
| CVE-2022-43468 | HIGH | 7.5 | 0.8% | Dec 7, 2022 | External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and ea... |
| CVE-2022-43464 | HIGH | 8.8 | 1.0% | Dec 7, 2022 | Hidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier ... |
| CVE-2022-42486 | MEDIUM | 4.8 | 0.6% | Dec 7, 2022 | Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote a... |
| CVE-2022-41994 | MEDIUM | 4.8 | 0.6% | Dec 7, 2022 | Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote aut... |
| CVE-2022-41800 | HIGH | 8.7 | 62.4% | Dec 7, 2022 | In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be... |
| CVE-2022-41783 | MEDIUM | 5.5 | 0.2% | Dec 7, 2022 | tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (... |
| CVE-2022-41622 | HIGH | 8.8 | 88.0% | Dec 7, 2022 | In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. ... |
| CVE-2022-37406 | MEDIUM | 4.8 | 0.6% | Dec 7, 2022 | Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authen... |
| CVE-2022-44849 | HIGH | 8.8 | 0.4% | Dec 7, 2022 | A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super ... |
| CVE-2022-45026 | CRITICAL | 9.8 | 1.0% | Dec 7, 2022 | An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary comma... |
| CVE-2022-45025 | CRITICAL | 9.8 | 34.5% | Dec 7, 2022 | Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerabi... |
| CVE-2022-45010 | CRITICAL | 9.8 | 0.8% | Dec 7, 2022 | Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid paramete... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now