2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-3437MEDIUM6.5A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines ...
CVE-2022-3341MEDIUM5.3A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c fil...
CVE-2022-47927MEDIUM5.5An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When ...
CVE-2022-24913MEDIUM5.5Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the...
CVE-2022-4365MEDIUM4.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions start...
CVE-2022-4345MEDIUM6.5Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allow...
CVE-2022-4131MEDIUM5.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions start...
CVE-2022-3870MEDIUM5.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions start...
CVE-2022-3573MEDIUM5.4An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions start...
CVE-2022-3514MEDIUM5.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starti...
CVE-2022-4344MEDIUM4.3Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of servic...
CVE-2022-46176MEDIUM5.9Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key veri...
CVE-2022-4885MEDIUM5.9A vulnerability has been found in sviehb jefferson up to 0.3 and classified as critical. This vulnerability affects unkn...
CVE-2022-4457MEDIUM5.5Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijac...
CVE-2022-34335MEDIUM6.5 IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.1 could allow an authenticated user to exhaust server res...
CVE-2022-4543MEDIUM5.5A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local atta...
CVE-2022-4415MEDIUM5.5A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not ...
CVE-2022-23814MEDIUM5.3Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest...
CVE-2022-23813MEDIUM5.3The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of i...
CVE-2022-0553MEDIUM4.6There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means...
CVE-2022-43392MEDIUM6.5A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which ...
CVE-2022-43391MEDIUM6.5A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, w...
CVE-2022-4382MEDIUM6.4A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could ...
CVE-2022-45167MEDIUM4.3An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user...
CVE-2022-45166MEDIUM4.3An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of us...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now