2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1430 | HIGH | 7.5 | 1.3% | May 18, 2022 | Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. |
| CVE-2022-29643 | HIGH | 7.5 | 1.1% | May 18, 2022 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the ... |
| CVE-2022-29642 | HIGH | 7.5 | 1.1% | May 18, 2022 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the ... |
| CVE-2022-29641 | HIGH | 7.5 | 1.3% | May 18, 2022 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the ... |
| CVE-2022-29640 | HIGH | 7.5 | 1.1% | May 18, 2022 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the ... |
| CVE-2022-29639 | HIGH | 8.1 | 1.8% | May 18, 2022 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulne... |
| CVE-2022-29638 | HIGH | 7.5 | 1.1% | May 18, 2022 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the ... |
| CVE-2022-28955 | HIGH | 7.5 | 38.3% | May 18, 2022 | An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php an... |
| CVE-2022-30976 | HIGH | 7.1 | 0.8% | May 18, 2022 | GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-b... |
| CVE-2022-29174 | HIGH | 8.1 | 1.3% | May 17, 2022 | countly-server is the server-side part of Countly, a product analytics solution. Prior to versions 22.03.7 and 21.11.4, ... |
| CVE-2022-29162 | HIGH | 7.8 | 0.4% | May 17, 2022 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in r... |
| CVE-2022-1362 | HIGH | 7.3 | 0.7% | May 17, 2022 | The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the... |
| CVE-2022-1361 | HIGH | 7.5 | 0.9% | May 17, 2022 | The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of speci... |
| CVE-2022-1359 | HIGH | 7.5 | 0.9% | May 17, 2022 | The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to ... |
| CVE-2022-1358 | HIGH | 7.5 | 0.8% | May 17, 2022 | The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in a... |
| CVE-2022-1356 | HIGH | 7.8 | 0.3% | May 17, 2022 | cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a us... |
| CVE-2022-28185 | HIGH | 7.1 | 0.3% | May 17, 2022 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular... |
| CVE-2022-28184 | HIGH | 7.8 | 0.3% | May 17, 2022 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler... |
| CVE-2022-28183 | HIGH | 7.1 | 0.3% | May 17, 2022 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged... |
| CVE-2022-28182 | HIGH | 8.5 | 1.5% | May 17, 2022 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where... |
| CVE-2022-24394 | HIGH | 8.8 | 2.4% | May 17, 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter... |
| CVE-2022-24393 | HIGH | 8.8 | 2.5% | May 17, 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter... |
| CVE-2022-24392 | HIGH | 8.8 | 2.5% | May 17, 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter... |
| CVE-2022-24391 | HIGH | 8.8 | 0.8% | May 17, 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacke... |
| CVE-2022-24390 | HIGH | 8.8 | 1.1% | May 17, 2022 | Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level c... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now