2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36078 | HIGH | 7.5 | 0.9% | Sep 2, 2022 | Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability tha... |
| CVE-2022-36076 | HIGH | 7.5 | 0.4% | Sep 2, 2022 | NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unne... |
| CVE-2022-37458 | HIGH | 7.2 | 1.1% | Sep 2, 2022 | Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate. |
| CVE-2022-25680 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto |
| CVE-2022-22106 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto |
| CVE-2022-22104 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto |
| CVE-2022-22102 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto |
| CVE-2022-22100 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto |
| CVE-2022-22099 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto |
| CVE-2022-22098 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon... |
| CVE-2022-22097 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapd... |
| CVE-2022-22080 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Co... |
| CVE-2022-22070 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Sn... |
| CVE-2022-22069 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapd... |
| CVE-2022-22067 | HIGH | 7.8 | 0.3% | Sep 2, 2022 | Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snap... |
| CVE-2022-22061 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Sna... |
| CVE-2022-22059 | HIGH | 7.8 | 0.1% | Sep 2, 2022 | Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon... |
| CVE-2022-29158 | HIGH | 7.5 | 1.7% | Sep 2, 2022 | Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles ... |
| CVE-2022-25813 | HIGH | 7.5 | 67.3% | Sep 2, 2022 | In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can ins... |
| CVE-2022-39189 | HIGH | 7.8 | 0.3% | Sep 2, 2022 | An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromis... |
| CVE-2022-36636 | HIGH | 8.8 | 0.9% | Sep 2, 2022 | Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php... |
| CVE-2022-39177 | HIGH | 8.8 | 0.6% | Sep 2, 2022 | BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capab... |
| CVE-2022-39176 | HIGH | 8.8 | 0.7% | Sep 2, 2022 | BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c d... |
| CVE-2022-39170 | HIGH | 8.8 | 0.9% | Sep 2, 2022 | libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c. |
| CVE-2022-36622 | HIGH | 7.5 | 1.1% | Sep 1, 2022 | Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now