2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29819 | HIGH | 7.7 | 0.2% | Apr 28, 2022 | In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible |
| CVE-2022-29818 | HIGH | 7.1 | 0.1% | Apr 28, 2022 | In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed |
| CVE-2022-29814 | HIGH | 7.7 | 0.2% | Apr 28, 2022 | In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible |
| CVE-2022-1509 | HIGH | 8.8 | 4.5% | Apr 28, 2022 | Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker... |
| CVE-2022-24735 | HIGH | 7.8 | 2.2% | Apr 27, 2022 | Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, ... |
| CVE-2022-22315 | HIGH | 8.8 | 0.7% | Apr 27, 2022 | IBM UrbanCode Deploy (UCD) 7.2.2.1 could allow an authenticated user with special permissions to obtain elevated privile... |
| CVE-2022-22278 | HIGH | 7.5 | 0.9% | Apr 27, 2022 | A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the so... |
| CVE-2022-22275 | HIGH | 7.5 | 1.0% | Apr 27, 2022 | Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy un... |
| CVE-2022-22521 | HIGH | 7.3 | 0.5% | Apr 27, 2022 | In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowi... |
| CVE-2022-29505 | HIGH | 7.8 | 0.5% | Apr 27, 2022 | Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that cou... |
| CVE-2022-27905 | HIGH | 7.2 | 1.0% | Apr 27, 2022 | In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require ... |
| CVE-2022-27239 | HIGH | 7.8 | 0.6% | Apr 27, 2022 | In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could le... |
| CVE-2022-29701 | HIGH | 7.5 | 1.0% | Apr 27, 2022 | A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount o... |
| CVE-2022-29700 | HIGH | 7.5 | 0.9% | Apr 27, 2022 | A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cau... |
| CVE-2022-28085 | HIGH | 7.8 | 1.1% | Apr 27, 2022 | A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lea... |
| CVE-2022-28918 | HIGH | 8.1 | 1.0% | Apr 26, 2022 | GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=... |
| CVE-2022-28528 | HIGH | 8.8 | 1.2% | Apr 26, 2022 | bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&p... |
| CVE-2022-28527 | HIGH | 8.1 | 1.0% | Apr 26, 2022 | dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/... |
| CVE-2022-28525 | HIGH | 8.8 | 0.9% | Apr 26, 2022 | ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_use... |
| CVE-2022-28523 | HIGH | 8.1 | 1.0% | Apr 26, 2022 | HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete. |
| CVE-2022-28059 | HIGH | 8.1 | 1.2% | Apr 26, 2022 | Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php. |
| CVE-2022-28058 | HIGH | 8.1 | 1.2% | Apr 26, 2022 | Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php. |
| CVE-2022-24882 | HIGH | 7.5 | 2.7% | Apr 26, 2022 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM)... |
| CVE-2022-23942 | HIGH | 7.5 | 3.1% | Apr 26, 2022 | Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lea... |
| CVE-2022-29419 | HIGH | 8.8 | 0.8% | Apr 25, 2022 | SQL Injection (SQLi) vulnerability in Don Crowther's 3xSocializer plugin <= 0.98.22 at WordPress possible for users with... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now