2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-33883 | HIGH | 7.8 | 0.4% | Oct 3, 2022 | A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Materi... |
| CVE-2022-41430 | HIGH | 8.8 | 0.7% | Oct 3, 2022 | Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux. |
| CVE-2022-41429 | HIGH | 8.8 | 0.7% | Oct 3, 2022 | Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag. |
| CVE-2022-41428 | HIGH | 8.8 | 0.7% | Oct 3, 2022 | Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux. |
| CVE-2022-3125 | HIGH | 8.8 | 1.1% | Oct 3, 2022 | The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to ren... |
| CVE-2022-38817 | HIGH | 7.5 | 2.9% | Oct 3, 2022 | Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitiv... |
| CVE-2022-40886 | HIGH | 7.2 | 1.0% | Oct 3, 2022 | DedeCMS 5.7.98 has a file upload vulnerability in the background. |
| CVE-2022-41082 | HIGH | 8 | 100.0% | Oct 3, 2022 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2022-41040 | HIGH | 8.8 | 99.9% | Oct 3, 2022 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2022-42004 | HIGH | 7.5 | 3.4% | Oct 2, 2022 | In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeseriali... |
| CVE-2022-42003 | HIGH | 7.5 | 3.4% | Oct 2, 2022 | In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of... |
| CVE-2022-39268 | HIGH | 8.1 | 0.4% | Sep 30, 2022 | ### Impact In a CSRF attack, an innocent end user is tricked by an attacker into submitting a web request that they did ... |
| CVE-2022-34429 | HIGH | 7.1 | 0.2% | Sep 30, 2022 | Dell Hybrid Client below 1.8 version contains a Zip Slip Vulnerability in UI. A guest privilege attacker could potential... |
| CVE-2022-40756 | HIGH | 8.8 | 0.7% | Sep 30, 2022 | If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update ... |
| CVE-2022-40341 | HIGH | 8.8 | 1.2% | Sep 30, 2022 | mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbit... |
| CVE-2022-20919 | HIGH | 7.5 | 1.0% | Sep 30, 2022 | A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Softw... |
| CVE-2022-20856 | HIGH | 7.5 | 1.1% | Sep 30, 2022 | A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Ci... |
| CVE-2022-20851 | HIGH | 7.2 | 0.9% | Sep 30, 2022 | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform ... |
| CVE-2022-20850 | HIGH | 7.1 | 0.2% | Sep 30, 2022 | A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenti... |
| CVE-2022-20848 | HIGH | 7.5 | 0.9% | Sep 30, 2022 | A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Cataly... |
| CVE-2022-20847 | HIGH | 7.5 | 1.1% | Sep 30, 2022 | A vulnerability in the DHCP processing functionality of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 ... |
| CVE-2022-20818 | HIGH | 7.8 | 0.6% | Sep 30, 2022 | Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevat... |
| CVE-2022-20775 | HIGH | 7.8 | 12.5% | Sep 30, 2022 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privil... |
| CVE-2022-41975 | HIGH | 7.8 | 0.2% | Sep 30, 2022 | RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI inst... |
| CVE-2022-41870 | HIGH | 7.2 | 1.2% | Sep 30, 2022 | AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app u... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now