2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36565 | HIGH | 8.8 | 0.8% | Aug 30, 2022 | Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to... |
| CVE-2022-36564 | HIGH | 8.8 | 0.8% | Aug 30, 2022 | Incorrect access control in the install directory (C:\Strawberry) of StrawberryPerl v5.32.1.1 and below allows authentic... |
| CVE-2022-36563 | HIGH | 8.8 | 0.8% | Aug 30, 2022 | Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenti... |
| CVE-2022-36562 | HIGH | 8.8 | 0.8% | Aug 30, 2022 | Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticate... |
| CVE-2022-34374 | HIGH | 8.8 | 1.4% | Aug 30, 2022 | Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries. A remote authentic... |
| CVE-2022-37237 | HIGH | 7.5 | 0.7% | Aug 30, 2022 | An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below com... |
| CVE-2022-36552 | HIGH | 7.5 | 0.7% | Aug 30, 2022 | Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which ... |
| CVE-2022-39028 | HIGH | 7.5 | 1.6% | Aug 30, 2022 | telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference v... |
| CVE-2022-38118 | HIGH | 8.8 | 1.3% | Aug 30, 2022 | OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user p... |
| CVE-2022-25887 | HIGH | 7.5 | 1.1% | Aug 30, 2022 | The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure gl... |
| CVE-2022-25857 | HIGH | 7.5 | 2.1% | Aug 30, 2022 | The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested de... |
| CVE-2022-24107 | HIGH | 7.8 | 0.3% | Aug 30, 2022 | Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. |
| CVE-2022-24106 | HIGH | 7.8 | 0.3% | Aug 30, 2022 | In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the fi... |
| CVE-2022-38784 | HIGH | 7.8 | 0.6% | Aug 30, 2022 | Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg... |
| CVE-2022-38625 | HIGH | 8.8 | 0.5% | Aug 29, 2022 | Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware fil... |
| CVE-2022-37681 | HIGH | 7.5 | 1.0% | Aug 29, 2022 | Hitachi Kokusai Electric Newtork products for monitoring system (Camera, Decoder and Encoder) and below allows attckers ... |
| CVE-2022-37680 | HIGH | 7.5 | 0.7% | Aug 29, 2022 | An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring syste... |
| CVE-2022-38772 | HIGH | 8.8 | 77.6% | Aug 29, 2022 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils... |
| CVE-2022-37177 | HIGH | 7.5 | 0.4% | Aug 29, 2022 | HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by th... |
| CVE-2022-36036 | HIGH | 7.8 | 0.4% | Aug 29, 2022 | mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection ... |
| CVE-2022-2559 | HIGH | 7.2 | 0.9% | Aug 29, 2022 | The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters befo... |
| CVE-2022-2261 | HIGH | 7.2 | 1.1% | Aug 29, 2022 | The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require... |
| CVE-2022-1123 | HIGH | 7.2 | 1.0% | Aug 29, 2022 | The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitiz... |
| CVE-2022-36034 | HIGH | 7.5 | 0.8% | Aug 29, 2022 | nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions o... |
| CVE-2022-27558 | HIGH | 7.5 | 0.5% | Aug 29, 2022 | HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now