2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20718 | HIGH | 7.2 | 2.3% | Apr 15, 2022 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att... |
| CVE-2022-20716 | HIGH | 7.8 | 0.2% | Apr 15, 2022 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privi... |
| CVE-2022-20714 | HIGH | 8.6 | 1.4% | Apr 15, 2022 | A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services... |
| CVE-2022-20697 | HIGH | 8.6 | 1.1% | Apr 15, 2022 | A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticat... |
| CVE-2022-20693 | HIGH | 7.2 | 1.5% | Apr 15, 2022 | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform ... |
| CVE-2022-20683 | HIGH | 8.6 | 1.4% | Apr 15, 2022 | A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst ... |
| CVE-2022-20682 | HIGH | 8.6 | 1.3% | Apr 15, 2022 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE W... |
| CVE-2022-20681 | HIGH | 7.8 | 0.2% | Apr 15, 2022 | A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Fami... |
| CVE-2022-20679 | HIGH | 7.7 | 1.2% | Apr 15, 2022 | A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote attacker... |
| CVE-2022-20678 | HIGH | 7.5 | 0.9% | Apr 15, 2022 | A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cau... |
| CVE-2022-20622 | HIGH | 7.5 | 1.3% | Apr 15, 2022 | A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points So... |
| CVE-2022-28048 | HIGH | 8.8 | 1.5% | Apr 15, 2022 | STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac. |
| CVE-2022-28042 | HIGH | 8.8 | 1.5% | Apr 15, 2022 | stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode. |
| CVE-2022-27474 | HIGH | 7.2 | 22.5% | Apr 15, 2022 | SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text f... |
| CVE-2022-28345 | HIGH | 7.5 | 2.1% | Apr 15, 2022 | The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded URLs begi... |
| CVE-2022-26498 | HIGH | 7.5 | 15.5% | Apr 15, 2022 | An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not ... |
| CVE-2022-27188 | HIGH | 7.8 | 0.5% | Apr 15, 2022 | OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTU... |
| CVE-2022-24854 | HIGH | 8.8 | 1.0% | Apr 14, 2022 | Metabase is an open source business intelligence and analytics application. SQLite has an FDW-like feature called `ATTAC... |
| CVE-2022-24846 | HIGH | 7.2 | 1.2% | Apr 14, 2022 | GeoWebCache is a tile caching server implemented in Java. The GeoWebCache disk quota mechanism can perform an unchecked ... |
| CVE-2022-22966 | HIGH | 7.2 | 6.3% | Apr 14, 2022 | An authenticated, high privileged malicious actor with network access to the VMware Cloud Director tenant or provider ma... |
| CVE-2022-1304 | HIGH | 7.8 | 1.4% | Apr 14, 2022 | An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and po... |
| CVE-2022-22149 | HIGH | 8.8 | 71.3% | Apr 14, 2022 | A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A... |
| CVE-2022-21234 | HIGH | 8.8 | 71.3% | Apr 14, 2022 | An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A speciall... |
| CVE-2022-21210 | HIGH | 8.8 | 69.8% | Apr 14, 2022 | An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specia... |
| CVE-2022-21154 | HIGH | 7.8 | 1.0% | Apr 14, 2022 | An integer overflow vulnerability exists in the fltSaveCMP functionality of Leadtools 22. A specially-crafted BMP file c... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now