2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-3297HIGH7.8Use After Free in GitHub repository vim/vim prior to 9.0.0579.
CVE-2022-3296HIGH7.8Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
CVE-2022-41340HIGH7.5The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signa...
CVE-2022-23464HIGH7.5Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SS...
CVE-2022-32814HIGH7.8A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15...
CVE-2022-22629HIGH8.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari ...
CVE-2022-40107HIGH7.5Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability ...
CVE-2022-40106HIGH7.5Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability ...
CVE-2022-40105HIGH7.5Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerab...
CVE-2022-40104HIGH7.5Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability ...
CVE-2022-40102HIGH7.5Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability ...
CVE-2022-40101HIGH7.5Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerab...
CVE-2022-3263HIGH7.8The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a loc...
CVE-2022-38454HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.
CVE-2022-38079HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability Backup Scheduler plugin <= 1.5.13 at WordPress.
CVE-2022-35893HIGH8.2An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the F...
CVE-2022-35248HIGH8.8A improper authentication vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 that allowed two factor authentic...
CVE-2022-32853HIGH7.1An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-00...
CVE-2022-32852HIGH7.1An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Pr...
CVE-2022-32851HIGH7.1An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-00...
CVE-2022-32843HIGH7.1An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-00...
CVE-2022-32842HIGH7.8An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-00...
CVE-2022-32831HIGH7.1An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catal...
CVE-2022-32829HIGH7.8This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An ...
CVE-2022-32826HIGH7.8An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, ma...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now