2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29173 | HIGH | 8.8 | 0.5% | May 5, 2022 | go-tuf is a Go implementation of The Update Framework (TUF). go-tuf does not correctly implement the client workflow for... |
| CVE-2022-29167 | HIGH | 7.5 | 1.0% | May 5, 2022 | Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptogra... |
| CVE-2022-29166 | HIGH | 8.8 | 0.9% | May 5, 2022 | matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate... |
| CVE-2022-29176 | HIGH | 7.5 | 1.7% | May 5, 2022 | Rubygems is a package registry used to supply software for the Ruby language ecosystem. Due to a bug in the yank action,... |
| CVE-2022-25989 | HIGH | 8.8 | 1.0% | May 5, 2022 | An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1... |
| CVE-2022-29501 | HIGH | 8.8 | 2.5% | May 5, 2022 | SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges and code execu... |
| CVE-2022-29500 | HIGH | 8.8 | 2.0% | May 5, 2022 | SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure. |
| CVE-2022-29491 | HIGH | 7.5 | 0.9% | May 5, 2022 | On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x v... |
| CVE-2022-29473 | HIGH | 7.5 | 0.7% | May 5, 2022 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, ... |
| CVE-2022-29263 | HIGH | 7.8 | 0.2% | May 5, 2022 | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6... |
| CVE-2022-28716 | HIGH | 8.8 | 0.7% | May 5, 2022 | On 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versi... |
| CVE-2022-28714 | HIGH | 7.8 | 0.3% | May 5, 2022 | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6... |
| CVE-2022-28706 | HIGH | 7.5 | 0.7% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS resolver configuration ... |
| CVE-2022-28705 | HIGH | 7.5 | 0.9% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, an... |
| CVE-2022-28701 | HIGH | 7.5 | 0.9% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a virtual server, undisclosed r... |
| CVE-2022-28695 | HIGH | 7.2 | 0.8% | May 5, 2022 | On F5 BIG-IP AFM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6... |
| CVE-2022-28691 | HIGH | 7.5 | 0.9% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and ... |
| CVE-2022-28080 | HIGH | 8.8 | 57.3% | May 5, 2022 | Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter. |
| CVE-2022-28079 | HIGH | 8.8 | 28.3% | May 5, 2022 | College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter. |
| CVE-2022-27806 | HIGH | 7.2 | 1.5% | May 5, 2022 | On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BI... |
| CVE-2022-27634 | HIGH | 7.2 | 1.3% | May 5, 2022 | On 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, BIG-IP APM does not properly validate config... |
| CVE-2022-27189 | HIGH | 7.5 | 0.9% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13... |
| CVE-2022-26890 | HIGH | 7.5 | 0.9% | May 5, 2022 | On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versi... |
| CVE-2022-26517 | HIGH | 7.5 | 0.7% | May 5, 2022 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, ... |
| CVE-2022-26372 | HIGH | 7.5 | 0.8% | May 5, 2022 | On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now