2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-2334HIGH7.2The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the at...
CVE-2022-23765HIGH8.8This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some ...
CVE-2022-1748HIGH7.5Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affec...
CVE-2022-1373HIGH7.2The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vu...
CVE-2022-1069HIGH7.5A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Inte...
CVE-2022-36216HIGH7.2DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.
CVE-2022-36215HIGH7.2DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.
CVE-2022-2862HIGH7.8Use After Free in GitHub repository vim/vim prior to 9.0.0221.
CVE-2022-2849HIGH7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.
CVE-2022-38149HIGH7.5HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returne...
CVE-2022-36186HIGH7.5A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_pro...
CVE-2022-31262HIGH7.8An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissi...
CVE-2022-30262HIGH7.8The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP...
CVE-2022-2845HIGH7.8Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.
CVE-2022-37459HIGH7.8Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions f...
CVE-2022-1410HIGH8.8OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authent...
CVE-2022-1401HIGH7.5Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appli...
CVE-2022-38238HIGH7.8XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.
CVE-2022-38237HIGH7.8XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.
CVE-2022-38236HIGH7.8XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc.
CVE-2022-38231HIGH7.8XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.
CVE-2022-38229HIGH7.8XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/...
CVE-2022-38228HIGH7.8XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc...
CVE-2022-38227HIGH7.8XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp.
CVE-2022-37781HIGH7.8fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/san...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now