2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1279 | HIGH | 7.5 | 0.3% | Apr 14, 2022 | A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-cli... |
| CVE-2022-1350 | HIGH | 7.8 | 0.8% | Apr 14, 2022 | A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_fr... |
| CVE-2022-24847 | HIGH | 7.2 | 1.4% | Apr 13, 2022 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The Geo... |
| CVE-2022-24843 | HIGH | 7.5 | 1.4% | Apr 13, 2022 | Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stac... |
| CVE-2022-24844 | HIGH | 8.8 | 1.4% | Apr 13, 2022 | Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stac... |
| CVE-2022-24828 | HIGH | 8.8 | 1.8% | Apr 13, 2022 | Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call `VcsDriver::g... |
| CVE-2022-24818 | HIGH | 7.2 | 2.3% | Apr 13, 2022 | GeoTools is an open source Java library that provides tools for geospatial data. The GeoTools library has a number of da... |
| CVE-2022-1347 | HIGH | 8.4 | 1.2% | Apr 13, 2022 | Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub reposi... |
| CVE-2022-27524 | HIGH | 7.1 | 1.3% | Apr 13, 2022 | An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a c... |
| CVE-2022-27523 | HIGH | 7.1 | 1.3% | Apr 13, 2022 | A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a cras... |
| CVE-2022-25797 | HIGH | 7.8 | 1.1% | Apr 13, 2022 | A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond ... |
| CVE-2022-25795 | HIGH | 7.8 | 1.8% | Apr 13, 2022 | A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through malicious... |
| CVE-2022-22960 | HIGH | 7.8 | 37.2% | Apr 13, 2022 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t... |
| CVE-2022-22958 | HIGH | 7.2 | 2.9% | Apr 13, 2022 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities ... |
| CVE-2022-22957 | HIGH | 7.2 | 21.9% | Apr 13, 2022 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities ... |
| CVE-2022-28052 | HIGH | 8 | 2.3% | Apr 13, 2022 | Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 a... |
| CVE-2022-1339 | HIGH | 7.5 | 5.6% | Apr 13, 2022 | SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capab... |
| CVE-2022-29156 | HIGH | 7.8 | 0.4% | Apr 13, 2022 | drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_rele... |
| CVE-2022-26151 | HIGH | 7.2 | 7.4% | Apr 13, 2022 | Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection. |
| CVE-2022-29050 | HIGH | 8.8 | 0.7% | Apr 12, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers t... |
| CVE-2022-27418 | HIGH | 7.8 | 0.8% | Apr 12, 2022 | Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c. |
| CVE-2022-27416 | HIGH | 7.8 | 0.8% | Apr 12, 2022 | Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free. |
| CVE-2022-27387 | HIGH | 7.5 | 2.3% | Apr 12, 2022 | MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, whi... |
| CVE-2022-27386 | HIGH | 7.5 | 2.2% | Apr 12, 2022 | MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. |
| CVE-2022-27385 | HIGH | 7.5 | 1.6% | Apr 12, 2022 | An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and belo... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now