2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2590 | HIGH | 7 | 0.9% | Aug 31, 2022 | A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of pr... |
| CVE-2022-2485 | HIGH | 7.5 | 0.4% | Aug 31, 2022 | Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device resp... |
| CVE-2022-2132 | HIGH | 8.6 | 1.7% | Aug 31, 2022 | A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of ser... |
| CVE-2022-2044 | HIGH | 8.2 | 0.6% | Aug 31, 2022 | MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite ... |
| CVE-2022-2043 | HIGH | 7.5 | 0.7% | Aug 31, 2022 | MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unre... |
| CVE-2022-2006 | HIGH | 7.8 | 0.3% | Aug 31, 2022 | AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code... |
| CVE-2022-2005 | HIGH | 7.5 | 0.4% | Aug 31, 2022 | AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server... |
| CVE-2022-2004 | HIGH | 7.5 | 0.8% | Aug 31, 2022 | AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to preven... |
| CVE-2022-26330 | HIGH | 7.5 | 0.5% | Aug 31, 2022 | Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exp... |
| CVE-2022-1976 | HIGH | 7.8 | 0.2% | Aug 31, 2022 | A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable pe... |
| CVE-2022-1888 | HIGH | 7.8 | 0.3% | Aug 31, 2022 | Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted p... |
| CVE-2022-1552 | HIGH | 8.8 | 11.7% | Aug 31, 2022 | A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is ma... |
| CVE-2022-1405 | HIGH | 7.8 | 2.2% | Aug 31, 2022 | CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowi... |
| CVE-2022-1404 | HIGH | 7.1 | 0.3% | Aug 31, 2022 | Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific p... |
| CVE-2022-1319 | HIGH | 7.5 | 1.2% | Aug 31, 2022 | A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packe... |
| CVE-2022-1271 | HIGH | 8.8 | 5.1% | Aug 31, 2022 | An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's cho... |
| CVE-2022-1259 | HIGH | 7.5 | 1.0% | Aug 31, 2022 | A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause o... |
| CVE-2022-1247 | HIGH | 7 | 0.3% | Aug 31, 2022 | An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to... |
| CVE-2022-36035 | HIGH | 7.8 | 0.3% | Aug 31, 2022 | Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automa... |
| CVE-2022-37022 | HIGH | 8.8 | 1.2% | Aug 31, 2022 | Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX ... |
| CVE-2022-39047 | HIGH | 8.8 | 1.0% | Aug 31, 2022 | Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's han... |
| CVE-2022-27563 | HIGH | 7.5 | 0.7% | Aug 30, 2022 | An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service. |
| CVE-2022-3037 | HIGH | 7.8 | 0.5% | Aug 30, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0322. |
| CVE-2022-37173 | HIGH | 7.8 | 0.2% | Aug 30, 2022 | An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacki... |
| CVE-2022-37172 | HIGH | 7.8 | 0.2% | Aug 30, 2022 | Incorrect access control in the install directory (C:\msys64) of Msys2 v20220603 and below allows authenticated attacker... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now