2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40875 | HIGH | 7.5 | 0.8% | Oct 27, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow in the function GetParentControlInfo. |
| CVE-2022-40874 | HIGH | 7.5 | 0.8% | Oct 27, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow vulnerability in the GetParentControlInfo function, whic... |
| CVE-2022-41996 | HIGH | 8.8 | 0.5% | Oct 27, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leadin... |
| CVE-2022-3725 | HIGH | 7.5 | 0.8% | Oct 27, 2022 | Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafte... |
| CVE-2022-38744 | HIGH | 7.5 | 1.1% | Oct 27, 2022 | An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service... |
| CVE-2022-3409 | HIGH | 7.5 | 0.6% | Oct 27, 2022 | A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified d... |
| CVE-2022-2809 | HIGH | 7.5 | 0.6% | Oct 27, 2022 | A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser c... |
| CVE-2022-25918 | HIGH | 7.5 | 1.2% | Oct 27, 2022 | The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the... |
| CVE-2022-3705 | HIGH | 7.5 | 1.2% | Oct 26, 2022 | A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer ... |
| CVE-2022-39286 | HIGH | 8.8 | 1.1% | Oct 26, 2022 | Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 co... |
| CVE-2022-42999 | HIGH | 7.5 | 2.7% | Oct 26, 2022 | D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admp... |
| CVE-2022-3670 | HIGH | 7.8 | 0.7% | Oct 26, 2022 | A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample ... |
| CVE-2022-3667 | HIGH | 7.5 | 1.1% | Oct 26, 2022 | A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4_MemoryBy... |
| CVE-2022-3666 | HIGH | 7.8 | 0.6% | Oct 26, 2022 | A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the fun... |
| CVE-2022-3665 | HIGH | 7.8 | 0.7% | Oct 26, 2022 | A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown funct... |
| CVE-2022-3664 | HIGH | 7.8 | 0.7% | Oct 26, 2022 | A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4_BitStream::Write... |
| CVE-2022-3662 | HIGH | 7.8 | 0.6% | Oct 26, 2022 | A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function... |
| CVE-2022-39362 | HIGH | 8.8 | 0.8% | Oct 26, 2022 | Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1... |
| CVE-2022-39361 | HIGH | 8.8 | 1.0% | Oct 26, 2022 | Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1... |
| CVE-2022-37202 | HIGH | 8.8 | 1.0% | Oct 26, 2022 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list |
| CVE-2022-43766 | HIGH | 7.5 | 1.3% | Oct 26, 2022 | Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untr... |
| CVE-2022-40238 | HIGH | 8.8 | 1.2% | Oct 26, 2022 | A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inj... |
| CVE-2022-39944 | HIGH | 8.8 | 1.7% | Oct 26, 2022 | In Apache Linkis <=1.2.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code... |
| CVE-2022-20955 | HIGH | 7.1 | 0.4% | Oct 26, 2022 | Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allo... |
| CVE-2022-20954 | HIGH | 7.1 | 0.4% | Oct 26, 2022 | Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allo... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now