2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-26028HIGH7.3Uncontrolled search path in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated ...
CVE-2022-26024HIGH7.8Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version...
CVE-2022-3952HIGH7.1A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerabil...
CVE-2022-3944HIGH8.8A vulnerability was found in jerryhanjj ERP. It has been declared as critical. Affected by this vulnerability is the fun...
CVE-2022-41607HIGH7.5All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (API) is vu...
CVE-2022-40225HIGH7.5A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6...
CVE-2022-41719HIGH7.5Unmarshal can panic on some inputs, possibly allowing for denial of service attacks.
CVE-2022-39393HIGH8.6Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implem...
CVE-2022-39392HIGH7.4Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of...
CVE-2022-39038HIGH8.8Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege ca...
CVE-2022-39037HIGH7.5Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit ...
CVE-2022-38122HIGH7.5UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this...
CVE-2022-42787HIGH8.8Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an us...
CVE-2022-45129HIGH7.5Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different...
CVE-2022-39368HIGH8.2Eclipse Californium is a Java implementation of RFC7252 - Constrained Application Protocol for IoT Cloud services. In ve...
CVE-2022-3285HIGH7.5Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15...
CVE-2022-41128HIGH8.8Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41125HIGH7.8Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41123HIGH7.8Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41120HIGH7.8Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
CVE-2022-41119HIGH7.8Visual Studio Remote Code Execution Vulnerability
CVE-2022-41118HIGH7.5Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41114HIGH7Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVE-2022-41113HIGH7.8Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2022-41109HIGH7.8Windows Win32k Elevation of Privilege Vulnerability

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now