2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-31710 | HIGH | 7.5 | 1.5% | Jan 26, 2023 | vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger t... |
| CVE-2022-31706 | CRITICAL | 9.8 | 87.1% | Jan 26, 2023 | The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject fi... |
| CVE-2022-31704 | CRITICAL | 9.8 | 81.0% | Jan 26, 2023 | The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely... |
| CVE-2022-29844 | CRITICAL | 9.8 | 36.4% | Jan 26, 2023 | A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 ... |
| CVE-2022-29843 | CRITICAL | 9.8 | 1.2% | Jan 26, 2023 | A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running fir... |
| CVE-2022-27508 | HIGH | 7.5 | 1.0% | Jan 26, 2023 | Unauthenticated denial of service |
| CVE-2022-27507 | MEDIUM | 6.5 | 1.0% | Jan 26, 2023 | Authenticated denial of service |
| CVE-2022-26329 | MEDIUM | 5.3 | 0.5% | Jan 26, 2023 | File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to deter... |
| CVE-2022-25962 | CRITICAL | 9.8 | 1.0% | Jan 26, 2023 | All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input... |
| CVE-2022-25927 | HIGH | 7.5 | 1.7% | Jan 26, 2023 | Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regul... |
| CVE-2022-25908 | CRITICAL | 9.8 | 1.5% | Jan 26, 2023 | All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to... |
| CVE-2022-25894 | CRITICAL | 9.8 | 2.6% | Jan 26, 2023 | All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionCont... |
| CVE-2022-25882 | HIGH | 7.5 | 1.6% | Jan 26, 2023 | Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tenso... |
| CVE-2022-25860 | CRITICAL | 9.8 | 2.7% | Jan 26, 2023 | Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), ... |
| CVE-2022-25847 | MEDIUM | 6.1 | 0.6% | Jan 26, 2023 | All versions of the package serve-lite are vulnerable to Cross-site Scripting (XSS) because when it detects a request to... |
| CVE-2022-25350 | HIGH | 7.8 | 1.2% | Jan 26, 2023 | All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper ... |
| CVE-2022-22462 | HIGH | 7.5 | 0.5% | Jan 26, 2023 | IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptogra... |
| CVE-2022-21810 | HIGH | 7.8 | 1.2% | Jan 26, 2023 | All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanit... |
| CVE-2022-21192 | HIGH | 7.5 | 1.3% | Jan 26, 2023 | All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other ... |
| CVE-2022-20494 | MEDIUM | 5.5 | 0.4% | Jan 26, 2023 | In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could ... |
| CVE-2022-20493 | HIGH | 7.8 | 0.2% | Jan 26, 2023 | In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. T... |
| CVE-2022-20492 | HIGH | 7.8 | 0.3% | Jan 26, 2023 | In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource ... |
| CVE-2022-20490 | HIGH | 7.8 | 0.3% | Jan 26, 2023 | In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resou... |
| CVE-2022-20489 | HIGH | 7.8 | 0.3% | Jan 26, 2023 | In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource ... |
| CVE-2022-20461 | HIGH | 7.8 | 0.1% | Jan 26, 2023 | In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to t... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now