2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1851 | HIGH | 7.8 | 1.6% | May 25, 2022 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-30323 | HIGH | 8.6 | 1.3% | May 25, 2022 | go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files. Fixed in 1.6.1 and 2.1.0. |
| CVE-2022-30322 | HIGH | 8.6 | 1.3% | May 25, 2022 | go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP response... |
| CVE-2022-30321 | HIGH | 8.6 | 3.1% | May 25, 2022 | go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and com... |
| CVE-2022-1883 | HIGH | 8.8 | 6.4% | May 25, 2022 | SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0. |
| CVE-2022-1815 | HIGH | 7.5 | 5.7% | May 25, 2022 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2. |
| CVE-2022-22497 | HIGH | 7.5 | 1.1% | May 24, 2022 | IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-F... |
| CVE-2022-29333 | HIGH | 7.8 | 0.9% | May 24, 2022 | A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file. |
| CVE-2022-23050 | HIGH | 7.2 | 4.6% | May 24, 2022 | ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hija... |
| CVE-2022-22977 | HIGH | 7.1 | 0.8% | May 24, 2022 | VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. A malicious act... |
| CVE-2022-1669 | HIGH | 8.1 | 0.7% | May 24, 2022 | A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The devi... |
| CVE-2022-22495 | HIGH | 8.8 | 2.1% | May 24, 2022 | IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, w... |
| CVE-2022-29249 | HIGH | 7.5 | 0.7% | May 24, 2022 | JavaEZ is a library that adds new functions to make Java easier. A weakness in JavaEZ 1.6 allows force decryption of loc... |
| CVE-2022-31261 | HIGH | 7.5 | 1.1% | May 24, 2022 | An XXE issue was discovered in Morpheus through 5.2.16 and 5.4.x through 5.4.4. A successful attack requires a SAML iden... |
| CVE-2022-30843 | HIGH | 8.8 | 0.9% | May 24, 2022 | Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=delete_category, id. |
| CVE-2022-29567 | HIGH | 7.5 | 1.0% | May 24, 2022 | The default configuration of a TreeGrid component uses Object::toString as a key on the client-side and server communica... |
| CVE-2022-29242 | HIGH | 7.5 | 1.6% | May 24, 2022 | GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL. TLS clients using GOST engi... |
| CVE-2022-29221 | HIGH | 8.8 | 4.5% | May 24, 2022 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio... |
| CVE-2022-29219 | HIGH | 7.5 | 1.2% | May 24, 2022 | Lodestar is a TypeScript implementation of the Ethereum Consensus specification. Prior to version 0.36.0, there is a pos... |
| CVE-2022-29217 | HIGH | 7.5 | 1.2% | May 24, 2022 | PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an att... |
| CVE-2022-1850 | HIGH | 8.1 | 1.0% | May 24, 2022 | Path Traversal in GitHub repository filegator/filegator prior to 7.8.0. |
| CVE-2022-30463 | HIGH | 8.8 | 0.9% | May 24, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product. |
| CVE-2022-30459 | HIGH | 8.8 | 0.9% | May 24, 2022 | ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simple_chat_bot/classes/Master.php?f=del... |
| CVE-2022-26532 | HIGH | 7.8 | 4.8% | May 24, 2022 | A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 t... |
| CVE-2022-26531 | HIGH | 7.8 | 5.8% | May 24, 2022 | Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versio... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now