2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-31566 | HIGH | 8.6 | 1.0% | Jul 11, 2022 | The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file f... |
| CVE-2022-30602 | HIGH | 8.1 | 1.0% | Jul 11, 2022 | Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated atta... |
| CVE-2022-2345 | HIGH | 7.8 | 1.3% | Jul 8, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0046. |
| CVE-2022-2344 | HIGH | 7.8 | 1.3% | Jul 8, 2022 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. |
| CVE-2022-35410 | HIGH | 7.5 | 1.8% | Jul 8, 2022 | mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning p... |
| CVE-2022-2343 | HIGH | 7.8 | 1.4% | Jul 8, 2022 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. |
| CVE-2022-22476 | HIGH | 8.8 | 0.6% | Jul 8, 2022 | IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing ... |
| CVE-2022-22465 | HIGH | 7.8 | 0.2% | Jul 8, 2022 | IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elev... |
| CVE-2022-22464 | HIGH | 7.5 | 0.6% | Jul 8, 2022 | IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic... |
| CVE-2022-33011 | HIGH | 8.8 | 1.2% | Jul 8, 2022 | Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection att... |
| CVE-2022-32481 | HIGH | 7.8 | 0.2% | Jul 7, 2022 | Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appli... |
| CVE-2022-2191 | HIGH | 7.5 | 1.7% | Jul 7, 2022 | In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffer... |
| CVE-2022-2048 | HIGH | 7.5 | 1.8% | Jul 7, 2022 | In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug... |
| CVE-2022-33680 | HIGH | 8.3 | 1.4% | Jul 7, 2022 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2022-32058 | HIGH | 7.5 | 1.1% | Jul 7, 2022 | An infinite loop in the function httpRpmPass of TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415 allows attackers to cause a ... |
| CVE-2022-32055 | HIGH | 7.5 | 1.0% | Jul 7, 2022 | Inout Homestay v2.2 was discovered to contain a SQL injection vulnerability via the guests parameter at /index.php?page=... |
| CVE-2022-31135 | HIGH | 7.5 | 0.8% | Jul 7, 2022 | Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Aff... |
| CVE-2022-31121 | HIGH | 7.5 | 1.6% | Jul 7, 2022 | Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a ma... |
| CVE-2022-31854 | HIGH | 7.2 | 24.9% | Jul 7, 2022 | Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin ... |
| CVE-2022-33996 | HIGH | 8.8 | 0.9% | Jul 7, 2022 | Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inh... |
| CVE-2022-25048 | HIGH | 8.8 | 18.2% | Jul 7, 2022 | Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user. |
| CVE-2022-2339 | HIGH | 7.5 | 1.5% | Jul 7, 2022 | With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's con... |
| CVE-2022-20859 | HIGH | 8.8 | 1.1% | Jul 6, 2022 | A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified C... |
| CVE-2022-31129 | HIGH | 7.5 | 3.9% | Jul 6, 2022 | moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of mo... |
| CVE-2022-26078 | HIGH | 7.5 | 0.8% | Jul 6, 2022 | Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP ad... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now