2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-1397HIGH8.8API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover.
CVE-2022-23705HIGH7.5A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arr...
CVE-2022-23704HIGH7.5A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow...
CVE-2022-30524HIGH7.8There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mis...
CVE-2022-30240HIGH7.8An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift...
CVE-2022-30239HIGH7.8An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena J...
CVE-2022-29972HIGH7.8An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift...
CVE-2022-29971HIGH7.8An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena O...
CVE-2022-29933HIGH8.8Craft CMS through 3.7.36 allows a remote unauthenticated attacker, who knows at least one valid username, to reset the a...
CVE-2022-28739HIGH7.5There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occu...
CVE-2022-27224HIGH7.2An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform c...
CVE-2022-23332HIGH8.8Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/...
CVE-2022-1631HIGH8.8Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim...
CVE-2022-30286HIGH7.5pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.
CVE-2022-30333HIGH7.5RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o...
CVE-2022-28463HIGH7.8ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
CVE-2022-1620HIGH7.5NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901....
CVE-2022-1619HIGH7.8Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerab...
CVE-2022-1616HIGH7.8Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashi...
CVE-2022-25324HIGH7.5All versions of package bignum are vulnerable to Denial of Service (DoS) due to a type-check exception in V8, when verif...
CVE-2022-28279HIGH7.8Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by a use-after-free vulnerability tha...
CVE-2022-28278HIGH7.8Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerabil...
CVE-2022-28277HIGH7.8Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerabil...
CVE-2022-28276HIGH7.8Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerabil...
CVE-2022-28275HIGH7.8Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerabil...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now