2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21737 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount` operations allows malicious u... |
| CVE-2022-23569 | MEDIUM | 6.5 | 0.5% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a deni... |
| CVE-2022-21735 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalMaxPool` can be made to crash ... |
| CVE-2022-21734 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail i... |
| CVE-2022-21729 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `UnravelIndex` is vulnerable to a divisio... |
| CVE-2022-21725 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can b... |
| CVE-2022-23568 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `AddManySparseToTensorsMap` is vulnerable... |
| CVE-2022-23567 | MEDIUM | 6.5 | 1.1% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementations of `Sparse*Cwise*` ops are vulnerable to in... |
| CVE-2022-21736 | MEDIUM | 6.5 | 0.7% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefin... |
| CVE-2022-21733 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `StringNGrams` can be used to trigger a d... |
| CVE-2022-21732 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `ThreadPoolHandle` can be used to trigger... |
| CVE-2022-21731 | MEDIUM | 6.5 | 0.8% | Feb 3, 2022 | Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ConcatV2` can be use... |
| CVE-2022-23871 | MEDIUM | 5.4 | 0.6% | Feb 3, 2022 | Multiple cross-site scripting (XSS) vulnerabilities in the component outcomes_addProcess.php of Gibbon CMS v22.0.01 allo... |
| CVE-2022-22818 | MEDIUM | 6.1 | 3.3% | Feb 3, 2022 | The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly enco... |
| CVE-2022-0432 | MEDIUM | 6.1 | 4.5% | Feb 2, 2022 | Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0. |
| CVE-2022-24301 | MEDIUM | 6.5 | 1.0% | Feb 2, 2022 | In Minetest before 5.4.0, players can add or subtract items from a different player's inventory. |
| CVE-2022-24198 | MEDIUM | 6.5 | 0.5% | Feb 1, 2022 | iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, w... |
| CVE-2022-24197 | MEDIUM | 6.5 | 1.5% | Feb 1, 2022 | iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows ... |
| CVE-2022-24196 | MEDIUM | 6.5 | 1.6% | Feb 1, 2022 | iText v7.1.17, up to (exluding)": 7.1.18 and 7.2.2 was discovered to contain an out-of-memory error via the component re... |
| CVE-2022-0220 | MEDIUM | 6.1 | 2.3% | Feb 1, 2022 | The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthent... |
| CVE-2022-21687 | MEDIUM | 6.5 | 1.0% | Feb 1, 2022 | gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary ... |
| CVE-2022-23607 | MEDIUM | 6.5 | 1.1% | Feb 1, 2022 | treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods (`treq.get`,... |
| CVE-2022-23603 | MEDIUM | 6.1 | 1.0% | Feb 1, 2022 | iTunesRPC-Remastered is a discord rich presence application for use with iTunes & Apple Music. In code before commit 24f... |
| CVE-2022-0419 | MEDIUM | 5.5 | 0.9% | Feb 1, 2022 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. |
| CVE-2022-23774 | MEDIUM | 5.3 | 0.9% | Feb 1, 2022 | Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now