2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41234 | HIGH | 8.8 | 0.8% | Sep 21, 2022 | Jenkins Rundeck Plugin 3.6.11 and earlier does not protect access to the /plugin/rundeck/webhook/ endpoint, allowing use... |
| CVE-2022-41232 | HIGH | 8 | 0.4% | Sep 21, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to... |
| CVE-2022-41228 | HIGH | 8.8 | 0.8% | Sep 21, 2022 | A missing permission check in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attack... |
| CVE-2022-41227 | HIGH | 8.8 | 0.4% | Sep 21, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 an... |
| CVE-2022-2265 | HIGH | 7.5 | 0.7% | Sep 21, 2022 | The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauth... |
| CVE-2022-38928 | HIGH | 7.8 | 0.4% | Sep 21, 2022 | XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. |
| CVE-2022-3068 | HIGH | 8.8 | 0.4% | Sep 21, 2022 | Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3. |
| CVE-2022-3080 | HIGH | 7.5 | 1.5% | Sep 21, 2022 | By sending specific queries to the resolver, an attacker can cause named to crash. |
| CVE-2022-38178 | HIGH | 7.5 | 2.5% | Sep 21, 2022 | By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small me... |
| CVE-2022-38177 | HIGH | 7.5 | 2.7% | Sep 21, 2022 | By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small me... |
| CVE-2022-2906 | HIGH | 7.5 | 1.6% | Sep 21, 2022 | An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of reso... |
| CVE-2022-2881 | HIGH | 8.2 | 1.0% | Sep 21, 2022 | The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the proce... |
| CVE-2022-41222 | HIGH | 7 | 0.5% | Sep 21, 2022 | mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held duri... |
| CVE-2022-40604 | HIGH | 7.5 | 1.5% | Sep 21, 2022 | In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extr... |
| CVE-2022-39221 | HIGH | 7.5 | 0.8% | Sep 21, 2022 | McWebserver mod runs a simple HTTP server alongside the Minecraft server in seperate threads. Path traversal in McWebser... |
| CVE-2022-32917 | HIGH | 7.8 | 5.6% | Sep 20, 2022 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.... |
| CVE-2022-32912 | HIGH | 8.8 | 1.1% | Sep 20, 2022 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 an... |
| CVE-2022-32911 | HIGH | 7.8 | 0.4% | Sep 20, 2022 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 1... |
| CVE-2022-32908 | HIGH | 7.8 | 0.3% | Sep 20, 2022 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS ... |
| CVE-2022-32886 | HIGH | 8.8 | 1.3% | Sep 20, 2022 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 ... |
| CVE-2022-32802 | HIGH | 7.8 | 0.4% | Sep 20, 2022 | A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Mont... |
| CVE-2022-28640 | HIGH | 8.8 | 0.5% | Sep 20, 2022 | A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiali... |
| CVE-2022-28639 | HIGH | 8.8 | 0.5% | Sep 20, 2022 | A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerability that c... |
| CVE-2022-28638 | HIGH | 7.8 | 0.2% | Sep 20, 2022 | An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that cou... |
| CVE-2022-28637 | HIGH | 7.8 | 0.2% | Sep 20, 2022 | A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss o... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now