2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-33738 | HIGH | 7.5 | 0.8% | Jul 6, 2022 | OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal |
| CVE-2022-33737 | HIGH | 7.5 | 0.7% | Jul 6, 2022 | The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.... |
| CVE-2022-30929 | HIGH | 8.8 | 1.5% | Jul 6, 2022 | Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper. |
| CVE-2022-30619 | HIGH | 8.8 | 0.6% | Jul 6, 2022 | Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in... |
| CVE-2022-23714 | HIGH | 7.8 | 0.2% | Jul 6, 2022 | A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security... |
| CVE-2022-21777 | HIGH | 7.8 | 0.1% | Jul 6, 2022 | In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalatio... |
| CVE-2022-21768 | HIGH | 8.8 | 0.3% | Jul 6, 2022 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation... |
| CVE-2022-21767 | HIGH | 8.8 | 0.3% | Jul 6, 2022 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation... |
| CVE-2022-20082 | HIGH | 7 | 0.1% | Jul 6, 2022 | In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit... |
| CVE-2022-28935 | HIGH | 7.2 | 3.0% | Jul 6, 2022 | Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, T... |
| CVE-2022-24139 | HIGH | 7.8 | 0.4% | Jul 6, 2022 | In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with ... |
| CVE-2022-24138 | HIGH | 7.8 | 0.5% | Jul 6, 2022 | IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramD... |
| CVE-2022-30591 | HIGH | 7.5 | 2.4% | Jul 6, 2022 | quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in... |
| CVE-2022-22681 | HIGH | 7.5 | 0.9% | Jul 6, 2022 | Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote a... |
| CVE-2022-31116 | HIGH | 7.5 | 1.8% | Jul 5, 2022 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were fou... |
| CVE-2022-34878 | HIGH | 8.8 | 2.7% | Jul 5, 2022 | SQL Injection vulnerability in User Stats interface (/vicidial/user_stats.php) of VICIdial via the file_download paramet... |
| CVE-2022-34877 | HIGH | 8.8 | 2.7% | Jul 5, 2022 | SQL Injection vulnerability in AST Agent Time Sheet interface ((/vicidial/AST_agent_time_sheet.php) of VICIdial via the ... |
| CVE-2022-34876 | HIGH | 8.8 | 2.7% | Jul 5, 2022 | SQL Injection vulnerability in admin interface (/vicidial/admin.php) of VICIdial via modify_email_accounts, access_recor... |
| CVE-2022-33743 | HIGH | 7.8 | 0.3% | Jul 5, 2022 | network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code... |
| CVE-2022-33742 | HIGH | 7.1 | 0.3% | Jul 5, 2022 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec... |
| CVE-2022-33741 | HIGH | 7.1 | 0.3% | Jul 5, 2022 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec... |
| CVE-2022-33740 | HIGH | 7.1 | 0.3% | Jul 5, 2022 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec... |
| CVE-2022-30290 | HIGH | 7.5 | 0.8% | Jul 5, 2022 | In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker... |
| CVE-2022-2304 | HIGH | 7.8 | 1.5% | Jul 5, 2022 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-26365 | HIGH | 7.1 | 0.3% | Jul 5, 2022 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now