2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-4343MEDIUM4.3An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.1.5, all versions startin...
CVE-2022-44349MEDIUM5.4NAVBLUE S.A.S N-Ops & Crew 22.5-rc.50 is vulnerable to Cross Site Scripting (XSS).
CVE-2022-1601MEDIUM5.3The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over...
CVE-2022-46783MEDIUM5.3An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may ...
CVE-2022-43909MEDIUM5.4IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav...
CVE-2022-3746MEDIUM6.7A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ...
CVE-2022-3745MEDIUM4.4A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ...
CVE-2022-3744MEDIUM6.7A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ...
CVE-2022-3743MEDIUM4.4A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ...
CVE-2022-3742MEDIUM6.7A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ...
CVE-2022-48566MEDIUM5.9An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations ...
CVE-2022-48564MEDIUM6.5read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when...
CVE-2022-48554MEDIUM5.5File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Sou...
CVE-2022-48547MEDIUM6.1A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers...
CVE-2022-48545MEDIUM5.5An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.
CVE-2022-48538MEDIUM5.3In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the ...
CVE-2022-48065MEDIUM5.5GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance i...
CVE-2022-48064MEDIUM5.5GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dw...
CVE-2022-48063MEDIUM5.5GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_s...
CVE-2022-47022MEDIUM4.7An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impac...
CVE-2022-47011MEDIUM5.5An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cau...
CVE-2022-47010MEDIUM5.5An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a den...
CVE-2022-47008MEDIUM5.5An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attacker...
CVE-2022-47007MEDIUM5.5An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a...
CVE-2022-45582MEDIUM6.1Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now