2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38117 | MEDIUM | 6.1 | 0.3% | Oct 24, 2022 | Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can... |
| CVE-2022-36368 | MEDIUM | 4.8 | 0.7% | Oct 24, 2022 | Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a... |
| CVE-2022-39272 | MEDIUM | 4.3 | 0.6% | Oct 22, 2022 | Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a De... |
| CVE-2022-39259 | MEDIUM | 5.5 | 0.3% | Oct 21, 2022 | jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prio... |
| CVE-2022-3646 | MEDIUM | 4.3 | 0.9% | Oct 21, 2022 | A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function ni... |
| CVE-2022-34438 | MEDIUM | 6.7 | 0.2% | Oct 21, 2022 | Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A local authenticated malici... |
| CVE-2022-34437 | MEDIUM | 6.7 | 0.5% | Oct 21, 2022 | Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious... |
| CVE-2022-31239 | MEDIUM | 4.4 | 0.2% | Oct 21, 2022 | Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log... |
| CVE-2022-41638 | MEDIUM | 5.4 | 0.4% | Oct 21, 2022 | Auth. Stored Cross-Site Scripting (XSS) in Pop-Up Chop Chop plugin <= 2.1.7 on WordPress. |
| CVE-2022-40311 | MEDIUM | 4.8 | 0.4% | Oct 21, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress. |
| CVE-2022-3627 | MEDIUM | 6.5 | 1.0% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, ... |
| CVE-2022-3626 | MEDIUM | 6.5 | 0.9% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections... |
| CVE-2022-3599 | MEDIUM | 6.5 | 0.9% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a de... |
| CVE-2022-3598 | MEDIUM | 6.5 | 0.9% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attacke... |
| CVE-2022-3597 | MEDIUM | 6.5 | 0.9% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, ... |
| CVE-2022-3570 | MEDIUM | 5.5 | 0.5% | Oct 21, 2022 | Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe ... |
| CVE-2022-27494 | MEDIUM | 5.4 | 0.6% | Oct 21, 2022 | Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely acce... |
| CVE-2022-1059 | MEDIUM | 6.1 | 0.6% | Oct 21, 2022 | Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely acce... |
| CVE-2022-42206 | MEDIUM | 5.4 | 0.4% | Oct 21, 2022 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.p... |
| CVE-2022-42205 | MEDIUM | 5.4 | 0.4% | Oct 21, 2022 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php. |
| CVE-2022-3637 | MEDIUM | 5.5 | 0.3% | Oct 21, 2022 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jl... |
| CVE-2022-3630 | MEDIUM | 5.5 | 0.2% | Oct 21, 2022 | A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects some unknown processing ... |
| CVE-2022-36966 | MEDIUM | 5.4 | 0.4% | Oct 20, 2022 | Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter caus... |
| CVE-2022-3621 | MEDIUM | 6.5 | 1.3% | Oct 20, 2022 | A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lo... |
| CVE-2022-3619 | MEDIUM | 4.3 | 0.6% | Oct 20, 2022 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now