2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32224 | CRITICAL | 9.8 | 2.4% | Dec 5, 2022 | A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.... |
| CVE-2022-32221 | CRITICAL | 9.8 | 4.7% | Dec 5, 2022 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data t... |
| CVE-2022-30123 | CRITICAL | 10 | 1.8% | Dec 5, 2022 | A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell ... |
| CVE-2022-27773 | CRITICAL | 9.8 | 2.6% | Dec 5, 2022 | A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execut... |
| CVE-2022-46169 | CRITICAL | 9.8 | 99.8% | Dec 5, 2022 | Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management fram... |
| CVE-2022-46164 | CRITICAL | 9.8 | 49.0% | Dec 5, 2022 | NodeBB is an open source Node.js based forum software. Due to a plain object with a prototype being used in socket.io me... |
| CVE-2022-45481 | CRITICAL | 9.8 | 1.6% | Dec 5, 2022 | The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute ar... |
| CVE-2022-45479 | CRITICAL | 9.8 | 1.6% | Dec 5, 2022 | PC Keyboard allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any... |
| CVE-2022-44039 | CRITICAL | 9.8 | 1.0% | Dec 5, 2022 | Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrit... |
| CVE-2022-43516 | CRITICAL | 9.8 | 0.9% | Dec 5, 2022 | A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in... |
| CVE-2022-43515 | CRITICAL | 9.8 | 1.2% | Dec 5, 2022 | Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addre... |
| CVE-2022-45477 | CRITICAL | 9.8 | 2.2% | Dec 5, 2022 | Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any pre... |
| CVE-2022-45315 | CRITICAL | 9.8 | 1.3% | Dec 5, 2022 | Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerabi... |
| CVE-2022-45822 | CRITICAL | 9.8 | 0.7% | Dec 5, 2022 | Unauth. SQL Injection (SQLi) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress. |
| CVE-2022-42496 | CRITICAL | 9.8 | 2.1% | Dec 5, 2022 | OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a... |
| CVE-2022-41642 | CRITICAL | 9.8 | 2.1% | Dec 5, 2022 | OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an ... |
| CVE-2022-35508 | CRITICAL | 9.8 | 1.2% | Dec 4, 2022 | Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests betw... |
| CVE-2022-46414 | CRITICAL | 9.8 | 1.3% | Dec 4, 2022 | An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticate... |
| CVE-2022-4277 | CRITICAL | 9.8 | 0.6% | Dec 3, 2022 | A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability... |
| CVE-2022-4276 | CRITICAL | 9.8 | 0.6% | Dec 3, 2022 | A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown func... |
| CVE-2022-4275 | CRITICAL | 9.8 | 0.6% | Dec 3, 2022 | A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an u... |
| CVE-2022-4274 | CRITICAL | 9.8 | 0.6% | Dec 3, 2022 | A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of ... |
| CVE-2022-4273 | CRITICAL | 9.8 | 0.8% | Dec 3, 2022 | A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0... |
| CVE-2022-4272 | CRITICAL | 9.8 | 0.8% | Dec 3, 2022 | A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown... |
| CVE-2022-44945 | CRITICAL | 9.8 | 0.9% | Dec 2, 2022 | Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the heading_field_id parameter. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now