2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1441 | HIGH | 7.8 | 0.9% | Apr 25, 2022 | MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to pars... |
| CVE-2022-24792 | HIGH | 7.5 | 1.8% | Apr 25, 2022 | PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects... |
| CVE-2022-22392 | HIGH | 7.8 | 2.0% | Apr 25, 2022 | IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an... |
| CVE-2022-1392 | HIGH | 7.5 | 11.1% | Apr 25, 2022 | The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include state... |
| CVE-2022-0656 | HIGH | 7.5 | 7.7% | Apr 25, 2022 | The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udraw_convert_url... |
| CVE-2022-26111 | HIGH | 8.8 | 4.0% | Apr 25, 2022 | The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creati... |
| CVE-2022-28053 | HIGH | 8.8 | 1.2% | Apr 25, 2022 | Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerabi... |
| CVE-2022-28871 | HIGH | 7.5 | 0.5% | Apr 25, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain ... |
| CVE-2022-1459 | HIGH | 8.3 | 1.0% | Apr 25, 2022 | Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1. |
| CVE-2022-29603 | HIGH | 8.1 | 1.4% | Apr 25, 2022 | A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API ... |
| CVE-2022-29546 | HIGH | 7.5 | 1.1% | Apr 25, 2022 | HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the... |
| CVE-2022-1452 | HIGH | 7.1 | 0.8% | Apr 24, 2022 | Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7... |
| CVE-2022-1451 | HIGH | 7.1 | 0.8% | Apr 24, 2022 | Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0.... |
| CVE-2022-1427 | HIGH | 7.8 | 0.4% | Apr 23, 2022 | Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary ... |
| CVE-2022-0354 | HIGH | 7.8 | 0.2% | Apr 22, 2022 | A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ab... |
| CVE-2022-0192 | HIGH | 7.8 | 0.2% | Apr 22, 2022 | A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege... |
| CVE-2022-27340 | HIGH | 8.8 | 0.7% | Apr 22, 2022 | MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attack... |
| CVE-2022-29583 | HIGH | 7.8 | 0.3% | Apr 22, 2022 | service_windows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Win... |
| CVE-2022-29582 | HIGH | 7 | 0.8% | Apr 22, 2022 | In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This... |
| CVE-2022-1437 | HIGH | 7.1 | 0.7% | Apr 22, 2022 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data ... |
| CVE-2022-27406 | HIGH | 7.5 | 3.2% | Apr 22, 2022 | FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the func... |
| CVE-2022-27405 | HIGH | 7.5 | 2.7% | Apr 22, 2022 | FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the func... |
| CVE-2022-1429 | HIGH | 7.5 | 64.6% | Apr 22, 2022 | SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capab... |
| CVE-2022-28366 | HIGH | 7.5 | 2.0% | Apr 21, 2022 | Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes ex... |
| CVE-2022-26856 | HIGH | 7.8 | 0.2% | Apr 21, 2022 | Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could p... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now