2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-25918HIGH7.5The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the...
CVE-2022-40703MEDIUM6.1CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on A...
CVE-2022-3363CRITICAL9.8Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.
CVE-2022-3705HIGH7.5A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer ...
CVE-2022-3704MEDIUM5.4A vulnerability classified as problematic has been found in Ruby on Rails. This affects an unknown part of the file acti...
CVE-2022-39355CRITICAL9.8Discourse Patreon enables syncronization between Discourse Groups and Patreon rewards. On sites with Patreon login enabl...
CVE-2022-39348MEDIUM5.4Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not...
CVE-2022-39286HIGH8.8Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 co...
CVE-2022-43003CRITICAL9.8D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecur...
CVE-2022-43002CRITICAL9.8D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/f...
CVE-2022-43001CRITICAL9.8D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity func...
CVE-2022-43000CRITICAL9.8D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/fo...
CVE-2022-42999HIGH7.5D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admp...
CVE-2022-42998CRITICAL9.8D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...
CVE-2022-3670HIGH7.8A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample ...
CVE-2022-3669MEDIUM5.5A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4_AvccAto...
CVE-2022-3668MEDIUM5.5A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the functio...
CVE-2022-3667HIGH7.5A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4_MemoryBy...
CVE-2022-3666HIGH7.8A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the fun...
CVE-2022-3665HIGH7.8A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown funct...
CVE-2022-3664HIGH7.8A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4_BitStream::Write...
CVE-2022-3663MEDIUM5.5A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_Sts...
CVE-2022-3662HIGH7.8A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function...
CVE-2022-3474MEDIUM4.3A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided c...
CVE-2022-39362HIGH8.8Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now