2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25788 | HIGH | 7.8 | 1.6% | Apr 19, 2022 | A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT... |
| CVE-2022-21497 | HIGH | 8.1 | 1.6% | Apr 19, 2022 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).... |
| CVE-2022-21491 | HIGH | 7.8 | 0.4% | Apr 19, 2022 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that... |
| CVE-2022-21476 | HIGH | 7.5 | 3.8% | Apr 19, 2022 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).... |
| CVE-2022-21466 | HIGH | 7.5 | 1.7% | Apr 19, 2022 | Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The sup... |
| CVE-2022-21464 | HIGH | 8.2 | 2.1% | Apr 19, 2022 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). ... |
| CVE-2022-21449 | HIGH | 7.5 | 46.7% | Apr 19, 2022 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).... |
| CVE-2022-21446 | HIGH | 8.2 | 1.5% | Apr 19, 2022 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affect... |
| CVE-2022-21442 | HIGH | 8.8 | 0.3% | Apr 19, 2022 | Vulnerability in Oracle GoldenGate (component: OGG Core Library). The supported version that is affected is Prior to 23.... |
| CVE-2022-21441 | HIGH | 7.5 | 1.3% | Apr 19, 2022 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th... |
| CVE-2022-21430 | HIGH | 8.5 | 1.1% | Apr 19, 2022 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications ... |
| CVE-2022-21424 | HIGH | 8.3 | 1.2% | Apr 19, 2022 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications ... |
| CVE-2022-21422 | HIGH | 7.5 | 1.0% | Apr 19, 2022 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications ... |
| CVE-2022-21421 | HIGH | 7.5 | 1.5% | Apr 19, 2022 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ana... |
| CVE-2022-21410 | HIGH | 7.2 | 1.1% | Apr 19, 2022 | Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. The supported ve... |
| CVE-2022-21404 | HIGH | 8.1 | 1.8% | Apr 19, 2022 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Reactive WebServer). Supported versions tha... |
| CVE-2022-1384 | HIGH | 8.8 | 0.6% | Apr 19, 2022 | Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Mark... |
| CVE-2022-1329 | HIGH | 8.8 | 92.9% | Apr 19, 2022 | The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due t... |
| CVE-2022-1119 | HIGH | 7.5 | 19.6% | Apr 19, 2022 | The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/i... |
| CVE-2022-27055 | HIGH | 7.5 | 1.5% | Apr 19, 2022 | ecjia-daojia 1.38.1-20210202629 is vulnerable to information leakage via content/apps/installer/classes/Helper.php. When... |
| CVE-2022-29153 | HIGH | 7.5 | 8.5% | Apr 19, 2022 | HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the C... |
| CVE-2022-29315 | HIGH | 8.8 | 1.4% | Apr 19, 2022 | Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV fea... |
| CVE-2022-1065 | HIGH | 8.8 | 2.8% | Apr 19, 2022 | A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentica... |
| CVE-2022-28108 | HIGH | 8.8 | 11.8% | Apr 19, 2022 | Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-url... |
| CVE-2022-24841 | HIGH | 8.1 | 0.8% | Apr 18, 2022 | fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams featu... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now