2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-34651HIGH7.5In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS ...
CVE-2022-33203HIGH7.5In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access poli...
CVE-2022-32455HIGH7.5In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, whe...
CVE-2022-31473HIGH7.7In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attac...
CVE-2022-35216HIGH7.5OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can explo...
CVE-2022-32963HIGH7.5OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploi...
CVE-2022-34158HIGH8.8A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, ...
CVE-2022-35506HIGH7.5TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of pr...
CVE-2022-35505HIGH7.5A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occ...
CVE-2022-35158HIGH7.5A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a...
CVE-2022-31197HIGH8PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, datab...
CVE-2022-34992HIGH7.8Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.
CVE-2022-37396HIGH7.8In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution
CVE-2022-34871HIGH7.2This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication ...
CVE-2022-28684HIGH8.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentica...
CVE-2022-28668HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro...
CVE-2022-34973HIGH7.5D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.
CVE-2022-36359HIGH8.8An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application ...
CVE-2022-32293HIGH8.1In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free...
CVE-2022-35737HIGH7.5SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a ...
CVE-2022-34969HIGH7.5PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.
CVE-2022-34968HIGH7.5An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service...
CVE-2022-34967HIGH7.5The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.
CVE-2022-27616HIGH7.2Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi compo...
CVE-2022-34937HIGH8.8Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vul...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now