2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-28357CRITICAL9.8NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action fro...
CVE-2022-3261HIGH7.5A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack o...
CVE-2022-47848HIGH7.5An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.1...
CVE-2022-38636——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2022-3466MEDIUM5.3The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316...
CVE-2022-20917MEDIUM4.3A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber coul...
CVE-2022-47631HIGH7.8Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privil...
CVE-2022-35849HIGH8.8An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface ...
CVE-2022-47637MEDIUM6.7The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory. Common use cases execute fi...
CVE-2022-4896HIGH7.5Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows wi...
CVE-2022-48475HIGH8.8Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by...
CVE-2022-48474HIGH7.5Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sendi...
CVE-2022-24093HIGH7.2Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation v...
CVE-2022-1415HIGH8.8A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This f...
CVE-2022-23382HIGH8.1Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through ...
CVE-2022-34238MEDIUM5.5Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 20.005.30334 (and earlier) are affect...
CVE-2022-34227HIGH7.8Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are ...
CVE-2022-34224HIGH7.8Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are ...
CVE-2022-28836HIGH7.8Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability ...
CVE-2022-28835HIGH7.8Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that ...
CVE-2022-28834HIGH7.8Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability ...
CVE-2022-28833HIGH7.8Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability...
CVE-2022-28832HIGH7.8Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability ...
CVE-2022-28831HIGH7.8Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability...
CVE-2022-22409MEDIUM5.3IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application, caused ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now