2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36309 | HIGH | 8.8 | 24.1% | Aug 16, 2022 | Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the Act... |
| CVE-2022-24951 | HIGH | 7 | 0.3% | Aug 16, 2022 | A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Termi... |
| CVE-2022-24950 | HIGH | 7.5 | 1.0% | Aug 16, 2022 | A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other... |
| CVE-2022-24949 | HIGH | 7.5 | 0.9% | Aug 16, 2022 | A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a ra... |
| CVE-2022-38359 | HIGH | 8.8 | 0.4% | Aug 15, 2022 | Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of ... |
| CVE-2022-38357 | HIGH | 8.8 | 0.9% | Aug 15, 2022 | Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection... |
| CVE-2022-2817 | HIGH | 7.8 | 0.5% | Aug 15, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0213. |
| CVE-2022-28756 | HIGH | 7.8 | 0.2% | Aug 15, 2022 | The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contain... |
| CVE-2022-38368 | HIGH | 8.8 | 0.7% | Aug 15, 2022 | An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mis... |
| CVE-2022-2816 | HIGH | 7.8 | 0.5% | Aug 15, 2022 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212. |
| CVE-2022-38187 | HIGH | 7.5 | 0.6% | Aug 15, 2022 | Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, whi... |
| CVE-2022-35822 | HIGH | 7.1 | 0.8% | Aug 15, 2022 | Windows Defender Credential Guard Security Feature Bypass Vulnerability |
| CVE-2022-34711 | HIGH | 7.8 | 0.7% | Aug 15, 2022 | Windows Defender Credential Guard Elevation of Privilege Vulnerability |
| CVE-2022-36526 | HIGH | 7.5 | 1.3% | Aug 15, 2022 | D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via functi... |
| CVE-2022-36524 | HIGH | 7.5 | 0.9% | Aug 15, 2022 | D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /... |
| CVE-2022-35624 | HIGH | 8.8 | 0.9% | Aug 15, 2022 | In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented packets... |
| CVE-2022-35623 | HIGH | 8.8 | 0.9% | Aug 15, 2022 | In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented control... |
| CVE-2022-33990 | HIGH | 7.5 | 0.9% | Aug 15, 2022 | Misinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to cache poisoning becaus... |
| CVE-2022-33988 | HIGH | 7.5 | 0.9% | Aug 15, 2022 | dproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries, which allows attacker... |
| CVE-2022-33992 | HIGH | 7.5 | 0.8% | Aug 15, 2022 | DNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka checking disabled) bit set t... |
| CVE-2022-38223 | HIGH | 7.8 | 0.4% | Aug 15, 2022 | There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTM... |
| CVE-2022-37401 | HIGH | 8.8 | 1.4% | Aug 15, 2022 | Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored... |
| CVE-2022-37400 | HIGH | 8.8 | 0.8% | Aug 15, 2022 | Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored... |
| CVE-2022-36006 | HIGH | 8.8 | 1.3% | Aug 15, 2022 | Arvados is an open source platform for managing, processing, and sharing genomic and other large scientific and biomedic... |
| CVE-2022-2822 | HIGH | 7.5 | 0.7% | Aug 15, 2022 | An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess us... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now