2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2309 | HIGH | 7.5 | 2.0% | Jul 5, 2022 | NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lx... |
| CVE-2022-2306 | HIGH | 7.5 | 0.7% | Jul 5, 2022 | Old session tokens can be used to authenticate to the application and send authenticated requests. |
| CVE-2022-34918 | HIGH | 7.8 | 5.5% | Jul 4, 2022 | An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buff... |
| CVE-2022-34829 | HIGH | 7.5 | 5.4% | Jul 4, 2022 | Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart) via a crafted payload ... |
| CVE-2022-31600 | HIGH | 8.2 | 0.2% | Jul 4, 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vu... |
| CVE-2022-31599 | HIGH | 8.2 | 0.2% | Jul 4, 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause acc... |
| CVE-2022-2268 | HIGH | 7.2 | 1.1% | Jul 4, 2022 | The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip... |
| CVE-2022-29484 | HIGH | 8.1 | 1.0% | Jul 4, 2022 | Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attack... |
| CVE-2022-34151 | HIGH | 8.1 | 1.1% | Jul 4, 2022 | Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earl... |
| CVE-2022-33971 | HIGH | 7.5 | 1.0% | Jul 4, 2022 | Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.2... |
| CVE-2022-33948 | HIGH | 8.8 | 1.0% | Jul 4, 2022 | HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHC... |
| CVE-2022-33208 | HIGH | 8.1 | 1.6% | Jul 4, 2022 | Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.4... |
| CVE-2022-32284 | HIGH | 7.5 | 2.5% | Jul 4, 2022 | Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Com... |
| CVE-2022-2289 | HIGH | 7.8 | 1.0% | Jul 3, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2288 | HIGH | 7.8 | 1.2% | Jul 3, 2022 | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2287 | HIGH | 7.1 | 1.4% | Jul 2, 2022 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2286 | HIGH | 7.8 | 1.4% | Jul 2, 2022 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2285 | HIGH | 7.8 | 1.4% | Jul 2, 2022 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2284 | HIGH | 7.8 | 1.4% | Jul 2, 2022 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-28200 | HIGH | 8.2 | 0.2% | Jul 2, 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can re... |
| CVE-2022-32551 | HIGH | 7.5 | 3.9% | Jul 2, 2022 | Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml... |
| CVE-2022-32412 | HIGH | 7.2 | 0.8% | Jul 1, 2022 | An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell. |
| CVE-2022-32411 | HIGH | 7.2 | 0.8% | Jul 1, 2022 | An issue in the languages config file of HongCMS v3.0 allows attackers to getshell. |
| CVE-2022-32420 | HIGH | 8.8 | 18.6% | Jul 1, 2022 | College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/... |
| CVE-2022-32384 | HIGH | 8.8 | 0.8% | Jul 1, 2022 | Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWif... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now