2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36621 | HIGH | 7.5 | 1.1% | Sep 1, 2022 | Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_... |
| CVE-2022-36604 | HIGH | 7.5 | 0.6% | Sep 1, 2022 | An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily ... |
| CVE-2022-36603 | HIGH | 8.8 | 1.4% | Sep 1, 2022 | InnoSilicon T3T+ t2t+_soc_20190911_151433.swu was discovered to contain a remote code execution (RCE) vulnerability in t... |
| CVE-2022-36602 | HIGH | 8.8 | 1.4% | Sep 1, 2022 | InnoSilicon A10 a10_20200924_120556 was discovered to contain a remote code execution (RCE) vulnerability in the setPlat... |
| CVE-2022-32743 | HIGH | 7.5 | 1.1% | Sep 1, 2022 | Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged ... |
| CVE-2022-2738 | HIGH | 7.5 | 0.7% | Sep 1, 2022 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrec... |
| CVE-2022-2639 | HIGH | 7.8 | 0.8% | Sep 1, 2022 | An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, whil... |
| CVE-2022-2320 | HIGH | 7.8 | 0.6% | Sep 1, 2022 | A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. ... |
| CVE-2022-2319 | HIGH | 7.8 | 0.4% | Sep 1, 2022 | A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due ... |
| CVE-2022-1902 | HIGH | 8.8 | 1.1% | Sep 1, 2022 | A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized i... |
| CVE-2022-1729 | HIGH | 7 | 0.3% | Sep 1, 2022 | A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain ... |
| CVE-2022-36773 | HIGH | 8.1 | 1.4% | Sep 1, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when proc... |
| CVE-2022-34380 | HIGH | 8.2 | 0.2% | Sep 1, 2022 | Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulner... |
| CVE-2022-30614 | HIGH | 7.5 | 1.3% | Sep 1, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sendin... |
| CVE-2022-2996 | HIGH | 7.4 | 0.5% | Sep 1, 2022 | A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate wou... |
| CVE-2022-36373 | HIGH | 8.8 | 0.4% | Sep 1, 2022 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simon Ward MP3 jPlayer plugin <= 2.7.3 at WordPress. |
| CVE-2022-37435 | HIGH | 8.8 | 1.1% | Sep 1, 2022 | Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege admi... |
| CVE-2022-36054 | HIGH | 8.8 | 0.6% | Sep 1, 2022 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementatio... |
| CVE-2022-36053 | HIGH | 8.8 | 0.5% | Sep 1, 2022 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 networ... |
| CVE-2022-36052 | HIGH | 8.8 | 0.5% | Sep 1, 2022 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementatio... |
| CVE-2022-36676 | HIGH | 7.2 | 0.8% | Sep 1, 2022 | Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /cate... |
| CVE-2022-36675 | HIGH | 7.2 | 0.8% | Sep 1, 2022 | Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sche... |
| CVE-2022-36674 | HIGH | 7.2 | 0.8% | Sep 1, 2022 | Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sche... |
| CVE-2022-36671 | HIGH | 7.5 | 0.4% | Sep 1, 2022 | Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download AP... |
| CVE-2022-37129 | HIGH | 8.8 | 8.3% | Aug 31, 2022 | D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now