2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26370 | HIGH | 7.5 | 0.7% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6, ... |
| CVE-2022-26071 | HIGH | 7.5 | 1.0% | May 5, 2022 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13... |
| CVE-2022-22433 | HIGH | 7.5 | 1.0% | May 5, 2022 | IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack, caused by imprope... |
| CVE-2022-29340 | HIGH | 7.5 | 1.1% | May 5, 2022 | GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal d... |
| CVE-2022-29339 | HIGH | 7.5 | 1.1% | May 5, 2022 | In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes ... |
| CVE-2022-28462 | HIGH | 7.5 | 1.0% | May 5, 2022 | novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability. |
| CVE-2022-29938 | HIGH | 8.8 | 1.4% | May 5, 2022 | In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via ... |
| CVE-2022-1592 | HIGH | 8.2 | 1.1% | May 5, 2022 | Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make... |
| CVE-2022-30288 | HIGH | 7.5 | 1.5% | May 4, 2022 | Agoo before 2.14.3 does not reject GraphQL fragment spreads that form cycles, leading to an application crash. NOTE: the... |
| CVE-2022-23724 | HIGH | 8.1 | 0.4% | May 4, 2022 | Use of static encryption key material allows forging an authentication token to other users within a tenant organization... |
| CVE-2022-20801 | HIGH | 7.2 | 1.8% | May 4, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could all... |
| CVE-2022-20799 | HIGH | 7.2 | 1.5% | May 4, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could all... |
| CVE-2022-20785 | HIGH | 7.5 | 6.2% | May 4, 2022 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 a... |
| CVE-2022-20780 | HIGH | 7.4 | 10.9% | May 4, 2022 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from ... |
| CVE-2022-20779 | HIGH | 8.8 | 10.2% | May 4, 2022 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from ... |
| CVE-2022-20771 | HIGH | 7.5 | 5.1% | May 4, 2022 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 a... |
| CVE-2022-20770 | HIGH | 7.5 | 6.2% | May 4, 2022 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 a... |
| CVE-2022-20764 | HIGH | 8.1 | 0.9% | May 4, 2022 | Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS S... |
| CVE-2022-20753 | HIGH | 7.2 | 1.9% | May 4, 2022 | A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authent... |
| CVE-2022-28940 | HIGH | 7.5 | 1.1% | May 4, 2022 | In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amou... |
| CVE-2022-28556 | HIGH | 7.5 | 1.0% | May 4, 2022 | Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability... |
| CVE-2022-23443 | HIGH | 7.5 | 1.2% | May 4, 2022 | An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API dat... |
| CVE-2022-28806 | HIGH | 7.8 | 0.4% | May 4, 2022 | An issue was discovered on certain Fujitsu LIEFBOOK devices (A3510, U9310, U7511/U7411/U7311, U9311, E5510/E5410, U7510/... |
| CVE-2022-28552 | HIGH | 8.8 | 0.8% | May 4, 2022 | Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to... |
| CVE-2022-28488 | HIGH | 7.5 | 1.1% | May 4, 2022 | The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerabilit... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now