2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-24705 | CRITICAL | 9.8 | 1.2% | Feb 14, 2022 | The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recv... |
| CVE-2022-24704 | CRITICAL | 9.8 | 1.2% | Feb 14, 2022 | The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby... |
| CVE-2022-23992 | CRITICAL | 9.8 | 2.3% | Feb 14, 2022 | XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validat... |
| CVE-2022-23410 | HIGH | 7.8 | 0.4% | Feb 14, 2022 | AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijack... |
| CVE-2022-0586 | HIGH | 7.5 | 2.0% | Feb 14, 2022 | Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via p... |
| CVE-2022-0583 | HIGH | 7.5 | 1.8% | Feb 14, 2022 | Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet... |
| CVE-2022-0582 | CRITICAL | 9.8 | 2.0% | Feb 14, 2022 | Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of servic... |
| CVE-2022-0581 | HIGH | 7.5 | 1.8% | Feb 14, 2022 | Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet ... |
| CVE-2022-24206 | CRITICAL | 9.8 | 1.2% | Feb 14, 2022 | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal/get_seal.php via the DEVICE_LI... |
| CVE-2022-23902 | CRITICAL | 9.8 | 1.2% | Feb 14, 2022 | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via the d_name parameter. |
| CVE-2022-23638 | MEDIUM | 6.1 | 0.7% | Feb 14, 2022 | svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-... |
| CVE-2022-23637 | MEDIUM | 5.4 | 0.5% | Feb 14, 2022 | K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cros... |
| CVE-2022-23391 | MEDIUM | 6.1 | 0.6% | Feb 14, 2022 | A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a... |
| CVE-2022-23390 | CRITICAL | 9.8 | 1.4% | Feb 14, 2022 | An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files. |
| CVE-2022-23389 | CRITICAL | 9.8 | 22.0% | Feb 14, 2022 | PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter. |
| CVE-2022-23337 | CRITICAL | 9.8 | 2.3% | Feb 14, 2022 | DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids parame... |
| CVE-2022-23336 | CRITICAL | 9.8 | 1.1% | Feb 14, 2022 | S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id parameter. |
| CVE-2022-23335 | CRITICAL | 9.8 | 1.6% | Feb 14, 2022 | Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParamet... |
| CVE-2022-22295 | CRITICAL | 9.8 | 1.6% | Feb 14, 2022 | Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameter_admin.class.php via the table_para p... |
| CVE-2022-24988 | CRITICAL | 9.8 | 1.1% | Feb 14, 2022 | In galois_2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector. |
| CVE-2022-25150 | HIGH | 7.8 | 0.4% | Feb 14, 2022 | In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to es... |
| CVE-2022-0579 | MEDIUM | 6.5 | 1.0% | Feb 14, 2022 | Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9. |
| CVE-2022-23367 | MEDIUM | 6.1 | 0.8% | Feb 14, 2022 | Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.... |
| CVE-2022-22854 | HIGH | 8.8 | 0.9% | Feb 14, 2022 | An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attacker... |
| CVE-2022-0512 | MEDIUM | 5.3 | 1.8% | Feb 14, 2022 | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now