2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23400 | HIGH | 7.1 | 0.8% | May 3, 2022 | A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft Image... |
| CVE-2022-1473 | HIGH | 7.5 | 2.5% | May 3, 2022 | The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by... |
| CVE-2022-1292 | HIGH | 7.3 | 82.6% | May 3, 2022 | The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distrib... |
| CVE-2022-28590 | HIGH | 7.2 | 22.8% | May 3, 2022 | A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme. |
| CVE-2022-0916 | HIGH | 8.8 | 0.4% | May 3, 2022 | An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves appli... |
| CVE-2022-23063 | HIGH | 8.8 | 1.2% | May 3, 2022 | In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed ... |
| CVE-2022-1554 | HIGH | 7.5 | 1.3% | May 3, 2022 | Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52. |
| CVE-2022-21949 | HIGH | 8.8 | 1.7% | May 3, 2022 | A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers... |
| CVE-2022-20767 | HIGH | 7.5 | 1.6% | May 3, 2022 | A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an un... |
| CVE-2022-20760 | HIGH | 7.5 | 1.6% | May 3, 2022 | A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat D... |
| CVE-2022-20759 | HIGH | 8.8 | 29.2% | May 3, 2022 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) ... |
| CVE-2022-20757 | HIGH | 7.5 | 1.2% | May 3, 2022 | A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unau... |
| CVE-2022-20751 | HIGH | 7.5 | 1.3% | May 3, 2022 | A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow ... |
| CVE-2022-20746 | HIGH | 7.5 | 1.3% | May 3, 2022 | A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthent... |
| CVE-2022-20745 | HIGH | 7.5 | 1.4% | May 3, 2022 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) ... |
| CVE-2022-20743 | HIGH | 8.8 | 3.7% | May 3, 2022 | A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authe... |
| CVE-2022-20742 | HIGH | 7.4 | 0.4% | May 3, 2022 | A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat D... |
| CVE-2022-20737 | HIGH | 7.1 | 1.1% | May 3, 2022 | A vulnerability in the handler for HTTP authentication for resources accessed through the Clientless SSL VPN portal of C... |
| CVE-2022-20730 | HIGH | 7.5 | 0.9% | May 3, 2022 | A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow a... |
| CVE-2022-20729 | HIGH | 7.8 | 0.3% | May 3, 2022 | A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to ... |
| CVE-2022-20715 | HIGH | 8.6 | 1.3% | May 3, 2022 | A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fire... |
| CVE-2022-24897 | HIGH | 7.5 | 1.4% | May 2, 2022 | APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity. Starting with version 2.... |
| CVE-2022-23723 | HIGH | 7.7 | 0.8% | May 2, 2022 | An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used ... |
| CVE-2022-28613 | HIGH | 7.5 | 0.9% | May 2, 2022 | A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus T... |
| CVE-2022-1273 | HIGH | 7.2 | 1.4% | May 2, 2022 | The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege u... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now