2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-28487 | HIGH | 7.5 | 1.9% | May 4, 2022 | Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vu... |
| CVE-2022-28099 | HIGH | 8.8 | 1.6% | May 4, 2022 | Poultry Farm Management System v1.0 was discovered to contain a SQL injection vulnerability via the Item parameter at /f... |
| CVE-2022-28076 | HIGH | 7.2 | 2.0% | May 4, 2022 | Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings. |
| CVE-2022-28067 | HIGH | 8.6 | 0.8% | May 4, 2022 | An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service (DoS) in t... |
| CVE-2022-27903 | HIGH | 8.8 | 2.5% | May 4, 2022 | An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Com... |
| CVE-2022-25785 | HIGH | 7.2 | 0.9% | May 4, 2022 | Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code executio... |
| CVE-2022-25778 | HIGH | 8.8 | 0.3% | May 4, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get r... |
| CVE-2022-28096 | HIGH | 7.2 | 19.1% | May 4, 2022 | Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/De... |
| CVE-2022-27470 | HIGH | 7.8 | 0.9% | May 4, 2022 | SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). T... |
| CVE-2022-24901 | HIGH | 7.5 | 0.6% | May 4, 2022 | Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to byp... |
| CVE-2022-21743 | HIGH | 7.8 | 0.1% | May 3, 2022 | In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege ... |
| CVE-2022-20111 | HIGH | 8.4 | 0.1% | May 3, 2022 | In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privi... |
| CVE-2022-1548 | HIGH | 8.8 | 0.5% | May 3, 2022 | Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook me... |
| CVE-2022-28792 | HIGH | 7.8 | 0.2% | May 3, 2022 | DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary... |
| CVE-2022-28783 | HIGH | 7.1 | 0.1% | May 3, 2022 | Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninst... |
| CVE-2022-27313 | HIGH | 7.5 | 0.9% | May 3, 2022 | An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleti... |
| CVE-2022-20110 | HIGH | 7 | 0.1% | May 3, 2022 | In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit... |
| CVE-2022-20109 | HIGH | 7.8 | 0.1% | May 3, 2022 | In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalatio... |
| CVE-2022-20099 | HIGH | 7.8 | 0.1% | May 3, 2022 | In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escala... |
| CVE-2022-20093 | HIGH | 7.8 | 0.1% | May 3, 2022 | In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. This could le... |
| CVE-2022-20088 | HIGH | 7.8 | 0.1% | May 3, 2022 | In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local esc... |
| CVE-2022-20084 | HIGH | 7.8 | 0.1% | May 3, 2022 | In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This ... |
| CVE-2022-22368 | HIGH | 7.5 | 0.7% | May 3, 2022 | IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker... |
| CVE-2022-29001 | HIGH | 7.2 | 1.0% | May 3, 2022 | In SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in arbitrary file upload vulnera... |
| CVE-2022-28505 | HIGH | 7.2 | 0.9% | May 3, 2022 | Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now