2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25881 | HIGH | 7.5 | 1.6% | Jan 31, 2023 | This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request... |
| CVE-2022-21129 | CRITICAL | 9.8 | 2.8% | Jan 31, 2023 | Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization ... |
| CVE-2022-4898 | MEDIUM | 5.4 | 0.4% | Jan 31, 2023 | In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in t... |
| CVE-2022-4441 | HIGH | 8.8 | 0.6% | Jan 31, 2023 | Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated u... |
| CVE-2022-4041 | HIGH | 8.8 | 0.6% | Jan 31, 2023 | Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated u... |
| CVE-2022-44897 | MEDIUM | 6.1 | 0.8% | Jan 31, 2023 | A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to exe... |
| CVE-2022-40258 | MEDIUM | 5.3 | 0.4% | Jan 31, 2023 | AMI Megarac Weak password hashes for Redfish & API |
| CVE-2022-30421 | HIGH | 7.8 | 0.3% | Jan 31, 2023 | Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive info... |
| CVE-2022-48176 | HIGH | 7.8 | 0.4% | Jan 31, 2023 | Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94... |
| CVE-2022-45897 | MEDIUM | 6.5 | 0.4% | Jan 31, 2023 | On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtai... |
| CVE-2022-48175 | CRITICAL | 9.8 | 1.7% | Jan 30, 2023 | Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/i... |
| CVE-2022-32748 | HIGH | 8.3 | 0.1% | Jan 30, 2023 | A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to ... |
| CVE-2022-32747 | HIGH | 8.1 | 0.3% | Jan 30, 2023 | A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of ... |
| CVE-2022-32529 | CRITICAL | 9.8 | 1.3% | Jan 30, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo... |
| CVE-2022-32528 | CRITICAL | 9.1 | 0.5% | Jan 30, 2023 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and ... |
| CVE-2022-32527 | CRITICAL | 9.8 | 1.3% | Jan 30, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo... |
| CVE-2022-32526 | CRITICAL | 9.8 | 1.3% | Jan 30, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo... |
| CVE-2022-32525 | CRITICAL | 9.8 | 1.3% | Jan 30, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo... |
| CVE-2022-32524 | CRITICAL | 9.8 | 1.3% | Jan 30, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo... |
| CVE-2022-32523 | CRITICAL | 9.8 | 1.3% | Jan 30, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo... |
| CVE-2022-32522 | CRITICAL | 9.8 | 1.1% | Jan 30, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo... |
| CVE-2022-32521 | HIGH | 8.8 | 0.5% | Jan 30, 2023 | A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the s... |
| CVE-2022-32520 | CRITICAL | 9.8 | 0.5% | Jan 30, 2023 | A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE insta... |
| CVE-2022-32519 | CRITICAL | 9.8 | 0.5% | Jan 30, 2023 | A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE ... |
| CVE-2022-32518 | CRITICAL | 9.8 | 0.5% | Jan 30, 2023 | A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE insta... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now