2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0669 | MEDIUM | 6.5 | 0.3% | Aug 29, 2022 | A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancill... |
| CVE-2022-0496 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) propertie... |
| CVE-2022-0485 | MEDIUM | 4.8 | 0.8% | Aug 29, 2022 | A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd c... |
| CVE-2022-0480 | MEDIUM | 5.5 | 0.3% | Aug 29, 2022 | A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exh... |
| CVE-2022-36687 | MEDIUM | 6.5 | 0.9% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the comp... |
| CVE-2022-35020 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_c... |
| CVE-2022-35019 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a segmentation fault. |
| CVE-2022-35018 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a segmentation fault. |
| CVE-2022-35017 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow. |
| CVE-2022-35016 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow. |
| CVE-2022-35015 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h. |
| CVE-2022-35014 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 contains a segmentation fault. |
| CVE-2022-37059 | MEDIUM | 4.8 | 0.5% | Aug 29, 2022 | Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field |
| CVE-2022-36194 | MEDIUM | 5.4 | 0.7% | Aug 29, 2022 | Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding ... |
| CVE-2022-25641 | MEDIUM | 5.5 | 0.2% | Aug 29, 2022 | Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference inf... |
| CVE-2022-36573 | MEDIUM | 6.1 | 0.5% | Aug 29, 2022 | A cross-site scripting (XSS) vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or H... |
| CVE-2022-3017 | MEDIUM | 6.5 | 0.4% | Aug 28, 2022 | Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38. |
| CVE-2022-38791 | MEDIUM | 5.5 | 0.2% | Aug 27, 2022 | In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream w... |
| CVE-2022-2787 | MEDIUM | 4.3 | 0.8% | Aug 27, 2022 | Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot s... |
| CVE-2022-3015 | MEDIUM | 6.1 | 0.3% | Aug 27, 2022 | A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue ... |
| CVE-2022-3014 | MEDIUM | 6.1 | 0.5% | Aug 27, 2022 | A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability af... |
| CVE-2022-36548 | MEDIUM | 5.4 | 0.5% | Aug 26, 2022 | Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /pa... |
| CVE-2022-36547 | MEDIUM | 6.1 | 0.5% | Aug 26, 2022 | Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at ... |
| CVE-2022-36542 | MEDIUM | 6.5 | 0.6% | Aug 26, 2022 | An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitra... |
| CVE-2022-36522 | MEDIUM | 6.5 | 1.1% | Aug 26, 2022 | Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now