2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-35921 | MEDIUM | 4.3 | 0.4% | Aug 1, 2022 | fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discu... |
| CVE-2022-35920 | HIGH | 7.5 | 1.0% | Aug 1, 2022 | Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when ... |
| CVE-2022-35919 | LOW | 2.7 | 52.3% | Aug 1, 2022 | MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions a... |
| CVE-2022-35918 | MEDIUM | 6.5 | 1.3% | Aug 1, 2022 | Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custo... |
| CVE-2022-35917 | MEDIUM | 5.3 | 0.6% | Aug 1, 2022 | Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized paymen... |
| CVE-2022-35916 | MEDIUM | 5.3 | 0.5% | Aug 1, 2022 | OpenZeppelin Contracts is a library for secure smart contract development. Contracts using the cross chain utilities for... |
| CVE-2022-35915 | MEDIUM | 5.3 | 0.6% | Aug 1, 2022 | OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 `supportsIn... |
| CVE-2022-31198 | HIGH | 7.5 | 0.6% | Aug 1, 2022 | OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Governor tha... |
| CVE-2022-31195 | HIGH | 7.2 | 1.1% | Aug 1, 2022 | DSpace open source software is a repository application which provides durable access to digital resources. In affected ... |
| CVE-2022-31194 | HIGH | 7.2 | 0.9% | Aug 1, 2022 | DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui... |
| CVE-2022-31193 | MEDIUM | 6.1 | 0.6% | Aug 1, 2022 | DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui... |
| CVE-2022-31192 | MEDIUM | 6.1 | 0.6% | Aug 1, 2022 | DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui... |
| CVE-2022-31191 | MEDIUM | 6.1 | 0.6% | Aug 1, 2022 | DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui... |
| CVE-2022-31189 | MEDIUM | 5.3 | 0.6% | Aug 1, 2022 | DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui... |
| CVE-2022-35118 | MEDIUM | 6.1 | 0.4% | Aug 1, 2022 | PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities. |
| CVE-2022-34530 | MEDIUM | 5.3 | 0.5% | Aug 1, 2022 | An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames v... |
| CVE-2022-31321 | CRITICAL | 9.1 | 0.8% | Aug 1, 2022 | The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform ... |
| CVE-2022-31190 | MEDIUM | 5.3 | 0.7% | Aug 1, 2022 | DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui... |
| CVE-2022-31188 | CRITICAL | 9.8 | 47.8% | Aug 1, 2022 | CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were foun... |
| CVE-2022-31186 | LOW | 3.3 | 0.2% | Aug 1, 2022 | NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulner... |
| CVE-2022-31185 | MEDIUM | 5.3 | 0.5% | Aug 1, 2022 | mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, eve... |
| CVE-2022-31184 | HIGH | 7.5 | 0.6% | Aug 1, 2022 | Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to sen... |
| CVE-2022-31183 | CRITICAL | 9.8 | 0.6% | Aug 1, 2022 | fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode `TLSSocket` using `fs2-io` on N... |
| CVE-2022-31182 | MEDIUM | 5.3 | 0.6% | Aug 1, 2022 | Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static asset... |
| CVE-2022-31181 | CRITICAL | 9.8 | 5.1% | Aug 1, 2022 | PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now