2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43429 | HIGH | 7.5 | 0.6% | Oct 19, 2022 | Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not lim... |
| CVE-2022-43416 | HIGH | 8.8 | 1.1% | Oct 19, 2022 | Jenkins Katalon Plugin 1.0.32 and earlier implements an agent/controller message that does not limit where it can be exe... |
| CVE-2022-43415 | HIGH | 7.5 | 0.9% | Oct 19, 2022 | Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2022-43407 | HIGH | 8.8 | 0.5% | Oct 19, 2022 | Jenkins Pipeline: Input Step Plugin 451.vf1a_a_4f405289 and earlier does not restrict or sanitize the optionally specifi... |
| CVE-2022-43042 | HIGH | 7.8 | 0.3% | Oct 19, 2022 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at... |
| CVE-2022-43040 | HIGH | 7.8 | 0.3% | Oct 19, 2022 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump... |
| CVE-2022-23734 | HIGH | 8.8 | 1.9% | Oct 19, 2022 | A deserialization of untrusted data vulnerability was identified in GitHub Enterprise Server that could potentially lead... |
| CVE-2022-3608 | HIGH | 8.4 | 0.9% | Oct 19, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha. |
| CVE-2022-39267 | HIGH | 8.8 | 0.7% | Oct 19, 2022 | Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other se... |
| CVE-2022-39260 | HIGH | 8.8 | 2.9% | Oct 19, 2022 | Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can b... |
| CVE-2022-33217 | HIGH | 7.8 | 0.1% | Oct 19, 2022 | Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication wit... |
| CVE-2022-33214 | HIGH | 7 | 0.1% | Oct 19, 2022 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon C... |
| CVE-2022-33210 | HIGH | 7.8 | 0.1% | Oct 19, 2022 | Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packe... |
| CVE-2022-25750 | HIGH | 8.8 | 0.1% | Oct 19, 2022 | Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobil... |
| CVE-2022-25749 | HIGH | 7.5 | 0.4% | Oct 19, 2022 | Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Co... |
| CVE-2022-25736 | HIGH | 7.5 | 0.7% | Oct 19, 2022 | Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdra... |
| CVE-2022-25723 | HIGH | 7.8 | 0.1% | Oct 19, 2022 | Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile |
| CVE-2022-25665 | HIGH | 7.1 | 0.1% | Oct 19, 2022 | Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT... |
| CVE-2022-25662 | HIGH | 7.5 | 0.3% | Oct 19, 2022 | Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon... |
| CVE-2022-25661 | HIGH | 7.8 | 0.1% | Oct 19, 2022 | Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons... |
| CVE-2022-25660 | HIGH | 7.8 | 0.1% | Oct 19, 2022 | Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn... |
| CVE-2022-22077 | HIGH | 7.8 | 0.1% | Oct 19, 2022 | Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile |
| CVE-2022-40798 | HIGH | 7.5 | 0.8% | Oct 19, 2022 | OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending t... |
| CVE-2022-33077 | HIGH | 7.5 | 0.8% | Oct 19, 2022 | An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the add... |
| CVE-2022-41500 | HIGH | 8.8 | 0.4% | Oct 18, 2022 | EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Cent... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now