2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38668 | HIGH | 7.5 | 1.1% | Aug 22, 2022 | HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack m... |
| CVE-2022-38171 | HIGH | 7.8 | 0.3% | Aug 22, 2022 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2S... |
| CVE-2022-34652 | HIGH | 8.8 | 0.9% | Aug 22, 2022 | A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. ... |
| CVE-2022-33149 | HIGH | 8.8 | 1.6% | Aug 22, 2022 | A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. ... |
| CVE-2022-33148 | HIGH | 8.8 | 1.0% | Aug 22, 2022 | A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. ... |
| CVE-2022-33147 | HIGH | 8.8 | 1.6% | Aug 22, 2022 | A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. ... |
| CVE-2022-32778 | HIGH | 7.5 | 2.0% | Aug 22, 2022 | An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7... |
| CVE-2022-32777 | HIGH | 7.5 | 2.0% | Aug 22, 2022 | An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7... |
| CVE-2022-32572 | HIGH | 8.8 | 22.7% | Aug 22, 2022 | An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master ... |
| CVE-2022-32282 | HIGH | 8.8 | 1.6% | Aug 22, 2022 | An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An atta... |
| CVE-2022-30605 | HIGH | 8.8 | 4.1% | Aug 22, 2022 | A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f... |
| CVE-2022-30534 | HIGH | 8.8 | 74.5% | Aug 22, 2022 | An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev ma... |
| CVE-2022-29468 | HIGH | 8.8 | 1.4% | Aug 22, 2022 | A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially... |
| CVE-2022-26061 | HIGH | 7.8 | 0.6% | Aug 22, 2022 | A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-... |
| CVE-2022-25972 | HIGH | 7.8 | 0.6% | Aug 22, 2022 | An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafte... |
| CVE-2022-25942 | HIGH | 7.8 | 0.6% | Aug 22, 2022 | An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted... |
| CVE-2022-1930 | HIGH | 7.5 | 0.8% | Aug 22, 2022 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an at... |
| CVE-2022-37133 | HIGH | 7.5 | 1.1% | Aug 22, 2022 | D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is re... |
| CVE-2022-36346 | HIGH | 8.8 | 0.3% | Aug 22, 2022 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress. |
| CVE-2022-34776 | HIGH | 7.5 | 0.4% | Aug 22, 2022 | Tabit - giftcard stealth. Several APIs on the web system display, without authorization, sensitive information such as h... |
| CVE-2022-34775 | HIGH | 7.5 | 0.4% | Aug 22, 2022 | Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containi... |
| CVE-2022-34772 | HIGH | 8.8 | 0.5% | Aug 22, 2022 | Tabit - password enumeration. Description: Tabit - password enumeration. The passwords for the Tabit system is a 4 digit... |
| CVE-2022-34770 | HIGH | 7.5 | 0.4% | Aug 22, 2022 | Tabit - sensitive information disclosure. Several APIs on the web system display, without authorization, sensitive infor... |
| CVE-2022-34347 | HIGH | 8.8 | 0.3% | Aug 22, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress. |
| CVE-2022-33900 | HIGH | 7.2 | 0.7% | Aug 22, 2022 | PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now