2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20056 | MEDIUM | 6.6 | 0.1% | Mar 10, 2022 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca... |
| CVE-2022-20055 | MEDIUM | 6.8 | 0.1% | Mar 10, 2022 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca... |
| CVE-2022-20054 | HIGH | 7.8 | 0.2% | Mar 10, 2022 | In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local esc... |
| CVE-2022-20053 | HIGH | 7.8 | 0.1% | Mar 10, 2022 | In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local ... |
| CVE-2022-20051 | MEDIUM | 5.5 | 0.1% | Mar 10, 2022 | In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could le... |
| CVE-2022-20050 | MEDIUM | 6.7 | 0.1% | Mar 10, 2022 | In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local ... |
| CVE-2022-20049 | MEDIUM | 6.7 | 0.1% | Mar 10, 2022 | In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalati... |
| CVE-2022-20048 | HIGH | 7.8 | 0.1% | Mar 10, 2022 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala... |
| CVE-2022-20047 | HIGH | 7.8 | 0.1% | Mar 10, 2022 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala... |
| CVE-2022-0904 | MEDIUM | 6.5 | 0.9% | Mar 10, 2022 | A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an atta... |
| CVE-2022-0903 | HIGH | 7.5 | 0.8% | Mar 10, 2022 | A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an... |
| CVE-2022-0891 | HIGH | 7.1 | 1.5% | Mar 10, 2022 | A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to... |
| CVE-2022-0865 | MEDIUM | 6.5 | 1.5% | Mar 10, 2022 | Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. Fo... |
| CVE-2022-0856 | MEDIUM | 6.5 | 2.8% | Mar 10, 2022 | libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Ser... |
| CVE-2022-0847 | HIGH | 7.8 | 89.1% | Mar 10, 2022 | A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop... |
| CVE-2022-0813 | HIGH | 7.5 | 1.2% | Mar 10, 2022 | PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid request... |
| CVE-2022-0725 | HIGH | 7.5 | 2.4% | Mar 10, 2022 | A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to... |
| CVE-2022-0618 | HIGH | 7.5 | 1.2% | Mar 10, 2022 | A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a speciall... |
| CVE-2022-0516 | HIGH | 7.8 | 0.3% | Mar 10, 2022 | A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linu... |
| CVE-2022-0507 | HIGH | 8.8 | 1.2% | Mar 10, 2022 | Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG ... |
| CVE-2022-0433 | MEDIUM | 5.5 | 0.3% | Mar 10, 2022 | A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_nex... |
| CVE-2022-0204 | HIGH | 8.8 | 1.8% | Mar 10, 2022 | A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could ... |
| CVE-2022-0906 | MEDIUM | 4.8 | 0.6% | Mar 10, 2022 | Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12. |
| CVE-2022-0905 | HIGH | 7.1 | 0.8% | Mar 10, 2022 | Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4. |
| CVE-2022-0895 | CRITICAL | 9.8 | 1.7% | Mar 10, 2022 | Static Code Injection in GitHub repository microweber/microweber prior to 1.3. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now