2022 CVE Vulnerabilities
27,526 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21855 | CRITICAL | 9 | 0.9% | Jan 11, 2022 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2022-21849 | CRITICAL | 9.8 | 6.2% | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
| CVE-2022-21846 | CRITICAL | 9 | 1.1% | Jan 11, 2022 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2022-22115 | CRITICAL | 9 | 1.0% | Jan 10, 2022 | In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag. S... |
| CVE-2022-22114 | CRITICAL | 9.6 | 1.3% | Jan 10, 2022 | In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term" search fu... |
| CVE-2022-22847 | CRITICAL | 9.8 | 1.2% | Jan 10, 2022 | Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services (either by an authenticated attacker, or in... |
| CVE-2022-22845 | CRITICAL | 9.8 | 3.8% | Jan 10, 2022 | QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key a... |
| CVE-2022-22824 | CRITICAL | 9.8 | 3.4% | Jan 10, 2022 | defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. |
| CVE-2022-22823 | CRITICAL | 9.8 | 3.4% | Jan 10, 2022 | build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. |
| CVE-2022-22822 | CRITICAL | 9.8 | 4.8% | Jan 10, 2022 | addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. |
| CVE-2022-22817 | CRITICAL | 9.8 | 3.4% | Jan 10, 2022 | PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python e... |
| CVE-2022-22704 | CRITICAL | 9.8 | 1.3% | Jan 6, 2022 | The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the des... |
| CVE-2022-21647 | CRITICAL | 9.8 | 37.7% | Jan 4, 2022 | CodeIgniter is an open source PHP full-stack web framework. Deserialization of Untrusted Data was found in the `old()` f... |
| CVE-2022-21643 | CRITICAL | 9.8 | 1.2% | Jan 4, 2022 | USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.p... |
| CVE-2022-0086 | CRITICAL | 9.8 | 1.2% | Jan 4, 2022 | uppy is vulnerable to Server-Side Request Forgery (SSRF) |
| CVE-2022-0080 | CRITICAL | 9.8 | 1.4% | Jan 2, 2022 | mruby is vulnerable to Heap-based Buffer Overflow |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now