2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25337 | CRITICAL | 9.8 | 1.0% | Feb 18, 2022 | Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image file... |
| CVE-2022-25336 | MEDIUM | 5.3 | 0.7% | Feb 18, 2022 | Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference... |
| CVE-2022-25335 | HIGH | 7.5 | 1.3% | Feb 18, 2022 | RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipulat... |
| CVE-2022-24445 | — | — | — | Feb 18, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-23982 | HIGH | 7.5 | 1.2% | Feb 18, 2022 | The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) allows server inform... |
| CVE-2022-23981 | MEDIUM | 4.3 | 0.6% | Feb 18, 2022 | The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (ve... |
| CVE-2022-21800 | MEDIUM | 6.5 | 0.5% | Feb 18, 2022 | MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve... |
| CVE-2022-21215 | CRITICAL | 9.8 | 1.4% | Feb 18, 2022 | This vulnerability could allow an attacker to force the server to create and execute a web request granting access to ba... |
| CVE-2022-21196 | CRITICAL | 9.8 | 3.5% | Feb 18, 2022 | MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve... |
| CVE-2022-21176 | HIGH | 7.5 | 1.0% | Feb 18, 2022 | MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve... |
| CVE-2022-21143 | CRITICAL | 9.8 | 1.1% | Feb 18, 2022 | MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve... |
| CVE-2022-21141 | CRITICAL | 9.8 | 3.0% | Feb 18, 2022 | MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve... |
| CVE-2022-0673 | MEDIUM | 6.5 | 1.0% | Feb 18, 2022 | A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory trave... |
| CVE-2022-0672 | MEDIUM | 5.5 | 0.3% | Feb 18, 2022 | A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive ... |
| CVE-2022-0671 | CRITICAL | 9.1 | 1.2% | Feb 18, 2022 | A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large ... |
| CVE-2022-0646 | HIGH | 7.8 | 0.3% | Feb 18, 2022 | A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way ... |
| CVE-2022-0585 | MEDIUM | 6.5 | 2.4% | Feb 18, 2022 | Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via ... |
| CVE-2022-0138 | HIGH | 7.5 | 1.0% | Feb 18, 2022 | MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve... |
| CVE-2022-25323 | MEDIUM | 6.1 | 3.2% | Feb 18, 2022 | ZEROF Web Server 2.0 allows /admin.back XSS. |
| CVE-2022-25322 | CRITICAL | 9.8 | 8.6% | Feb 18, 2022 | ZEROF Web Server 2.0 allows /HandleEvent SQL Injection. |
| CVE-2022-23647 | MEDIUM | 6.1 | 1.5% | Feb 18, 2022 | Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line p... |
| CVE-2022-0666 | HIGH | 7.5 | 44.3% | Feb 18, 2022 | CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist micro... |
| CVE-2022-0664 | CRITICAL | 9.8 | 1.7% | Feb 18, 2022 | Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1. |
| CVE-2022-0631 | CRITICAL | 9.8 | 0.9% | Feb 18, 2022 | Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. |
| CVE-2022-0451 | MEDIUM | 6.5 | 1.0% | Feb 18, 2022 | Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now