2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4379 | HIGH | 7.5 | 6.3% | Jan 10, 2023 | A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allow... |
| CVE-2022-4338 | CRITICAL | 9.8 | 1.3% | Jan 10, 2023 | An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch. |
| CVE-2022-4337 | CRITICAL | 9.8 | 1.3% | Jan 10, 2023 | An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch. |
| CVE-2022-46449 | HIGH | 7.5 | 0.9% | Jan 10, 2023 | An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2022-46163 | HIGH | 7.5 | 1.0% | Jan 10, 2023 | Travel support program is a rails app to support the travel support program of openSUSE (TSP). Sensitive user data (bank... |
| CVE-2022-45167 | MEDIUM | 4.3 | 0.5% | Jan 10, 2023 | An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user... |
| CVE-2022-45166 | MEDIUM | 4.3 | 0.5% | Jan 10, 2023 | An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of us... |
| CVE-2022-45165 | HIGH | 8.8 | 0.6% | Jan 10, 2023 | An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-cont... |
| CVE-2022-45164 | MEDIUM | 4.3 | 0.4% | Jan 10, 2023 | An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user... |
| CVE-2022-38492 | HIGH | 8.8 | 0.7% | Jan 10, 2023 | An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. One parameter allows SQL injection. Version 2022.... |
| CVE-2022-38491 | HIGH | 7.5 | 0.5% | Jan 10, 2023 | An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protec... |
| CVE-2022-38490 | HIGH | 8.8 | 0.7% | Jan 10, 2023 | An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection. Version 2022... |
| CVE-2022-38489 | MEDIUM | 5.4 | 0.4% | Jan 10, 2023 | An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting (XSS). ... |
| CVE-2022-38482 | MEDIUM | 4.3 | 0.6% | Jan 10, 2023 | A link-manipulation issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP4. |
| CVE-2022-38481 | MEDIUM | 6.1 | 0.5% | Jan 10, 2023 | An issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP2. The application is prone to reflected Cross-site Scripti... |
| CVE-2022-38393 | HIGH | 7.5 | 18.8% | Jan 10, 2023 | A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386... |
| CVE-2022-38105 | HIGH | 7.5 | 1.1% | Jan 10, 2023 | An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge18223... |
| CVE-2022-36443 | HIGH | 7.8 | 0.2% | Jan 10, 2023 | An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communi... |
| CVE-2022-36442 | MEDIUM | 5.5 | 0.2% | Jan 10, 2023 | An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is p... |
| CVE-2022-36441 | HIGH | 7.1 | 0.2% | Jan 10, 2023 | An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The Gboard used by different applications can be used to... |
| CVE-2022-35401 | HIGH | 8.1 | 20.8% | Jan 10, 2023 | An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_4967... |
| CVE-2022-30332 | MEDIUM | 5.3 | 0.8% | Jan 10, 2023 | In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error me... |
| CVE-2022-4636 | HIGH | 7.5 | 0.9% | Jan 10, 2023 | Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T ... |
| CVE-2022-45614 | — | — | — | Jan 10, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-4228. Reason: This candidate is a reservation du... |
| CVE-2022-4711 | MEDIUM | 4.3 | 0.7% | Jan 10, 2023 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now