2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38955 | HIGH | 7.5 | 0.3% | Sep 20, 2022 | An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attac... |
| CVE-2022-38340 | HIGH | 7.2 | 0.9% | Sep 20, 2022 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via t... |
| CVE-2022-37259 | HIGH | 7.5 | 1.0% | Sep 20, 2022 | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js... |
| CVE-2022-37205 | HIGH | 8.8 | 1.1% | Sep 20, 2022 | JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters... |
| CVE-2022-26873 | HIGH | 8.2 | 0.4% | Sep 20, 2022 | A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages... |
| CVE-2022-35196 | HIGH | 8.8 | 0.4% | Sep 20, 2022 | TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php. |
| CVE-2022-40955 | HIGH | 8.8 | 2.0% | Sep 20, 2022 | In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL... |
| CVE-2022-3079 | HIGH | 7.5 | 0.7% | Sep 20, 2022 | Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpag... |
| CVE-2022-34917 | HIGH | 7.5 | 1.2% | Sep 20, 2022 | A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability all... |
| CVE-2022-39958 | HIGH | 7.5 | 0.9% | Sep 20, 2022 | The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass to sequentially exfiltrate small and und... |
| CVE-2022-39957 | HIGH | 7.5 | 0.8% | Sep 20, 2022 | The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass. A client can issue an HTTP Accept heade... |
| CVE-2022-38532 | HIGH | 7.8 | 0.5% | Sep 19, 2022 | Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component C_Featu... |
| CVE-2022-38351 | HIGH | 8.8 | 0.9% | Sep 19, 2022 | A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administra... |
| CVE-2022-28204 | HIGH | 7.5 | 0.8% | Sep 19, 2022 | A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWha... |
| CVE-2022-28203 | HIGH | 7.5 | 1.1% | Sep 19, 2022 | A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Whe... |
| CVE-2022-3239 | HIGH | 7.8 | 0.2% | Sep 19, 2022 | A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for t... |
| CVE-2022-38576 | HIGH | 7.2 | 0.8% | Sep 19, 2022 | Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/de... |
| CVE-2022-2995 | HIGH | 7.1 | 0.4% | Sep 19, 2022 | Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclos... |
| CVE-2022-23766 | HIGH | 8.8 | 0.5% | Sep 19, 2022 | An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order ... |
| CVE-2022-40608 | HIGH | 7.5 | 1.6% | Sep 19, 2022 | IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the t... |
| CVE-2022-40143 | HIGH | 7.3 | 0.4% | Sep 19, 2022 | A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service ... |
| CVE-2022-40142 | HIGH | 7.8 | 0.3% | Sep 19, 2022 | A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a... |
| CVE-2022-40141 | HIGH | 7.5 | 1.1% | Sep 19, 2022 | A vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to intercept and decode certai... |
| CVE-2022-40139 | HIGH | 7.2 | 2.9% | Sep 19, 2022 | Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One a... |
| CVE-2022-38764 | HIGH | 7.8 | 0.2% | Sep 19, 2022 | A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieg... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now