2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3693 | HIGH | 7.5 | 0.7% | Jan 13, 2023 | Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue a... |
| CVE-2022-42268 | HIGH | 7.8 | 0.6% | Jan 13, 2023 | Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Mac... |
| CVE-2022-3841 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the... |
| CVE-2022-3782 | CRITICAL | 9.1 | 5.8% | Jan 13, 2023 | keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs... |
| CVE-2022-3143 | HIGH | 7.4 | 0.6% | Jan 13, 2023 | wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elyt... |
| CVE-2022-21191 | CRITICAL | 9.8 | 1.5% | Jan 13, 2023 | Versions of the package global-modules-path before 3.0.0 are vulnerable to Command Injection due to missing input saniti... |
| CVE-2022-42290 | HIGH | 8.8 | 1.0% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, w... |
| CVE-2022-42289 | HIGH | 8.8 | 1.0% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, w... |
| CVE-2022-42288 | MEDIUM | 5.3 | 0.5% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a v... |
| CVE-2022-42287 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary file... |
| CVE-2022-42286 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of pr... |
| CVE-2022-46502 | CRITICAL | 9.8 | 13.7% | Jan 13, 2023 | Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter... |
| CVE-2022-42285 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SP... |
| CVE-2022-42284 | MEDIUM | 5.5 | 0.1% | Jan 13, 2023 | NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credenti... |
| CVE-2022-42283 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause ... |
| CVE-2022-42282 | MEDIUM | 5.5 | 0.5% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may ... |
| CVE-2022-42281 | MEDIUM | 6.7 | 0.2% | Jan 13, 2023 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker ... |
| CVE-2022-42280 | HIGH | 7.8 | 0.3% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path travers... |
| CVE-2022-42279 | HIGH | 8.8 | 1.1% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, w... |
| CVE-2022-42278 | HIGH | 7.8 | 0.6% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locati... |
| CVE-2022-42277 | HIGH | 8.2 | 0.2% | Jan 13, 2023 | NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can re... |
| CVE-2022-42276 | HIGH | 8.2 | 0.2% | Jan 13, 2023 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read,... |
| CVE-2022-48258 | MEDIUM | 5.3 | 1.1% | Jan 13, 2023 | In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles. |
| CVE-2022-48257 | MEDIUM | 5.3 | 0.9% | Jan 13, 2023 | In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. |
| CVE-2022-48256 | HIGH | 7.5 | 0.7% | Jan 13, 2023 | Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now