2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45184 | HIGH | 7.2 | 1.9% | Nov 14, 2022 | The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the conf... |
| CVE-2022-45183 | HIGH | 8.8 | 0.8% | Nov 14, 2022 | Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with ... |
| CVE-2022-45199 | HIGH | 7.5 | 1.1% | Nov 14, 2022 | Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. |
| CVE-2022-45198 | HIGH | 7.5 | 1.2% | Nov 14, 2022 | Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). |
| CVE-2022-31630 | HIGH | 7.1 | 2.2% | Nov 14, 2022 | In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible ... |
| CVE-2022-3979 | HIGH | 8.1 | 1.0% | Nov 13, 2022 | A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAut... |
| CVE-2022-3976 | HIGH | 8.8 | 0.5% | Nov 13, 2022 | A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability aff... |
| CVE-2022-3974 | HIGH | 8.8 | 0.7% | Nov 13, 2022 | A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4... |
| CVE-2022-3970 | HIGH | 8.8 | 1.2% | Nov 13, 2022 | A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt ... |
| CVE-2022-3967 | HIGH | 7.8 | 0.2% | Nov 13, 2022 | A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of ... |
| CVE-2022-3966 | HIGH | 7.5 | 0.7% | Nov 13, 2022 | A vulnerability, which was classified as critical, has been found in Ultimate Member Plugin up to 2.5.0. This issue affe... |
| CVE-2022-3965 | HIGH | 8.1 | 0.9% | Nov 13, 2022 | A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream... |
| CVE-2022-3964 | HIGH | 8.1 | 3.5% | Nov 13, 2022 | A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/... |
| CVE-2022-45196 | HIGH | 7.5 | 0.8% | Nov 12, 2022 | Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted cha... |
| CVE-2022-45188 | HIGH | 7.8 | 0.6% | Nov 12, 2022 | Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl fi... |
| CVE-2022-41339 | HIGH | 7.8 | 0.5% | Nov 12, 2022 | In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege esca... |
| CVE-2022-40773 | HIGH | 8.8 | 4.5% | Nov 12, 2022 | Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege esca... |
| CVE-2022-45193 | HIGH | 8.8 | 0.5% | Nov 12, 2022 | CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privil... |
| CVE-2022-41906 | HIGH | 8.7 | 0.7% | Nov 11, 2022 | OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via E... |
| CVE-2022-41882 | HIGH | 7.8 | 0.5% | Nov 11, 2022 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, ... |
| CVE-2022-38387 | HIGH | 8.8 | 0.9% | Nov 11, 2022 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbit... |
| CVE-2022-38099 | HIGH | 7.8 | 0.2% | Nov 11, 2022 | Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may al... |
| CVE-2022-37345 | HIGH | 7.8 | 0.2% | Nov 11, 2022 | Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated... |
| CVE-2022-37334 | HIGH | 7.8 | 0.2% | Nov 11, 2022 | Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version... |
| CVE-2022-36789 | HIGH | 7.8 | 0.2% | Nov 11, 2022 | Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now