2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39821 | HIGH | 7.5 | 0.6% | Sep 13, 2022 | In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The we... |
| CVE-2022-39819 | HIGH | 8.8 | 1.4% | Sep 13, 2022 | In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execut... |
| CVE-2022-39817 | HIGH | 8.8 | 0.7% | Sep 13, 2022 | In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker.... |
| CVE-2022-38495 | HIGH | 7.8 | 0.3% | Sep 13, 2022 | LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c. |
| CVE-2022-38306 | HIGH | 7.8 | 0.3% | Sep 13, 2022 | LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc. |
| CVE-2022-36768 | HIGH | 7.8 | 0.2% | Sep 13, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c... |
| CVE-2022-34356 | HIGH | 7.8 | 0.2% | Sep 13, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel... |
| CVE-2022-3182 | HIGH | 7 | 0.2% | Sep 13, 2022 | Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earl... |
| CVE-2022-32555 | HIGH | 8.8 | 0.3% | Sep 13, 2022 | Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenti... |
| CVE-2022-2962 | HIGH | 7.8 | 0.4% | Sep 13, 2022 | A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descript... |
| CVE-2022-20398 | HIGH | 7.8 | 0.1% | Sep 13, 2022 | In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a perm... |
| CVE-2022-20395 | HIGH | 7.8 | 0.1% | Sep 13, 2022 | In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead t... |
| CVE-2022-20392 | HIGH | 7.8 | 0.1% | Sep 13, 2022 | In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission wi... |
| CVE-2022-40635 | HIGH | 7.2 | 1.2% | Sep 13, 2022 | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticat... |
| CVE-2022-40634 | HIGH | 7.2 | 1.2% | Sep 13, 2022 | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticat... |
| CVE-2022-39208 | HIGH | 7.5 | 1.4% | Sep 13, 2022 | Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. All files in the /opt/onedev/sites/ directory ar... |
| CVE-2022-39203 | HIGH | 8.8 | 0.7% | Sep 13, 2022 | matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of charac... |
| CVE-2022-38020 | HIGH | 7.3 | 0.9% | Sep 13, 2022 | Visual Studio Code Elevation of Privilege Vulnerability |
| CVE-2022-38019 | HIGH | 7.8 | 0.8% | Sep 13, 2022 | AV1 Video Extension Remote Code Execution Vulnerability |
| CVE-2022-38013 | HIGH | 7.5 | 3.1% | Sep 13, 2022 | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2022-38012 | HIGH | 7.7 | 0.8% | Sep 13, 2022 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2022-38011 | HIGH | 7.3 | 0.8% | Sep 13, 2022 | Raw Image Extension Remote Code Execution Vulnerability |
| CVE-2022-38010 | HIGH | 7.8 | 0.8% | Sep 13, 2022 | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2022-38009 | HIGH | 8.8 | 1.6% | Sep 13, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-38008 | HIGH | 8.8 | 1.6% | Sep 13, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now