2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36049 | HIGH | 7.5 | 1.0% | Sep 7, 2022 | Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a K... |
| CVE-2022-36073 | HIGH | 8.8 | 0.8% | Sep 7, 2022 | RubyGems.org is the Ruby community gem host. A bug in password & email change confirmation code allowed an attacker to c... |
| CVE-2022-36070 | HIGH | 7.3 | 0.3% | Sep 7, 2022 | Poetry is a dependency manager for Python. To handle dependencies that come from a Git repository, Poetry executes vario... |
| CVE-2022-36069 | HIGH | 7.3 | 1.5% | Sep 7, 2022 | Poetry is a dependency manager for Python. When handling dependencies that come from a Git repository instead of a regis... |
| CVE-2022-30078 | HIGH | 8.8 | 1.9% | Sep 7, 2022 | NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0... |
| CVE-2022-1807 | HIGH | 7.2 | 1.0% | Sep 7, 2022 | Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall ol... |
| CVE-2022-37780 | HIGH | 7.2 | 1.7% | Sep 7, 2022 | Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command exe... |
| CVE-2022-36539 | HIGH | 7.5 | 1.2% | Sep 7, 2022 | WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to ... |
| CVE-2022-31414 | HIGH | 7.5 | 1.7% | Sep 7, 2022 | D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulne... |
| CVE-2022-3152 | HIGH | 8.8 | 0.7% | Sep 7, 2022 | Unverified Password Change in GitHub repository phpfusion/phpfusion prior to 9.10.20. |
| CVE-2022-37730 | HIGH | 8.8 | 0.3% | Sep 7, 2022 | In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to f... |
| CVE-2022-37108 | HIGH | 7.2 | 1.0% | Sep 7, 2022 | An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with ... |
| CVE-2022-36271 | HIGH | 7.8 | 0.5% | Sep 7, 2022 | Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker ... |
| CVE-2022-35513 | HIGH | 7.5 | 4.1% | Sep 7, 2022 | The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage. |
| CVE-2022-31166 | HIGH | 8.8 | 1.1% | Sep 7, 2022 | XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Starting in versions 11.3.7, 11.0... |
| CVE-2022-40023 | HIGH | 7.5 | 1.7% | Sep 7, 2022 | Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. ... |
| CVE-2022-37189 | HIGH | 7.5 | 1.1% | Sep 7, 2022 | DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to ... |
| CVE-2022-38530 | HIGH | 7.8 | 0.4% | Sep 6, 2022 | GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD. |
| CVE-2022-38529 | HIGH | 7.8 | 0.3% | Sep 6, 2022 | tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress. |
| CVE-2022-38176 | HIGH | 7.8 | 0.4% | Sep 6, 2022 | An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer pa... |
| CVE-2022-36065 | HIGH | 7.5 | 1.1% | Sep 6, 2022 | GrowthBook is an open-source platform for feature flagging and A/B testing. With some self-hosted configurations in vers... |
| CVE-2022-36064 | HIGH | 7.5 | 1.1% | Sep 6, 2022 | Shescape is a shell escape package for JavaScript. An Inefficient Regular Expression Complexity vulnerability impacts us... |
| CVE-2022-26861 | HIGH | 7.8 | 0.2% | Sep 6, 2022 | Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could ... |
| CVE-2022-26860 | HIGH | 7.8 | 0.2% | Sep 6, 2022 | Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerabilit... |
| CVE-2022-26859 | HIGH | 7 | 0.1% | Sep 6, 2022 | Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending maliciou... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now