2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-48565CRITICAL9.8An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity ...
CVE-2022-48564MEDIUM6.5read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when...
CVE-2022-48560HIGH7.5A use-after-free exists in Python through 3.9 via heappushpop in heapq.
CVE-2022-48554MEDIUM5.5File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Sou...
CVE-2022-48547MEDIUM6.1A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers...
CVE-2022-48545MEDIUM5.5An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.
CVE-2022-48541HIGH7.1A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "ide...
CVE-2022-48538MEDIUM5.3In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the ...
CVE-2022-48522CRITICAL9.8In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or loc...
CVE-2022-48174CRITICAL9.8There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles...
CVE-2022-48065MEDIUM5.5GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance i...
CVE-2022-48064MEDIUM5.5GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dw...
CVE-2022-48063MEDIUM5.5GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_s...
CVE-2022-47696HIGH7.8An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecifie...
CVE-2022-47695HIGH7.8An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecifie...
CVE-2022-47673HIGH7.8An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads ...
CVE-2022-47069HIGH7.8p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::...
CVE-2022-47022MEDIUM4.7An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impac...
CVE-2022-47011MEDIUM5.5An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cau...
CVE-2022-47010MEDIUM5.5An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a den...
CVE-2022-47008MEDIUM5.5An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attacker...
CVE-2022-47007MEDIUM5.5An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a...
CVE-2022-45703HIGH7.8Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
CVE-2022-45611CRITICAL9.8An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated privileges via via cap...
CVE-2022-45582MEDIUM6.1Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now