2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22663 | MEDIUM | 5.5 | 0.9% | May 26, 2022 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadO... |
| CVE-2022-22662 | MEDIUM | 6.5 | 1.3% | May 26, 2022 | A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 ... |
| CVE-2022-22616 | MEDIUM | 5.5 | 7.7% | May 26, 2022 | This issue was addressed with improved checks. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey ... |
| CVE-2022-30494 | MEDIUM | 5.4 | 0.6% | May 26, 2022 | In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Inject... |
| CVE-2022-27777 | MEDIUM | 6.1 | 1.5% | May 26, 2022 | A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if a... |
| CVE-2022-22577 | MEDIUM | 6.1 | 1.6% | May 26, 2022 | An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like re... |
| CVE-2022-30787 | MEDIUM | 6.7 | 0.4% | May 26, 2022 | An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when usin... |
| CVE-2022-30785 | MEDIUM | 6.7 | 0.4% | May 26, 2022 | A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write o... |
| CVE-2022-30783 | MEDIUM | 6.7 | 0.4% | May 26, 2022 | An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the ... |
| CVE-2022-29091 | MEDIUM | 6.1 | 0.9% | May 26, 2022 | Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vul... |
| CVE-2022-29082 | MEDIUM | 4.6 | 0.3% | May 26, 2022 | Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 1... |
| CVE-2022-26865 | MEDIUM | 6.8 | 0.3% | May 26, 2022 | Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated... |
| CVE-2022-24418 | MEDIUM | 6.7 | 0.2% | May 26, 2022 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl... |
| CVE-2022-24417 | MEDIUM | 6.7 | 0.2% | May 26, 2022 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl... |
| CVE-2022-24414 | MEDIUM | 6.5 | 0.6% | May 26, 2022 | Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can g... |
| CVE-2022-20821 | MEDIUM | 6.5 | 11.8% | May 26, 2022 | A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to acce... |
| CVE-2022-20809 | MEDIUM | 6.5 | 0.9% | May 26, 2022 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresenc... |
| CVE-2022-31651 | MEDIUM | 5.5 | 1.1% | May 25, 2022 | In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a. |
| CVE-2022-31650 | MEDIUM | 5.5 | 1.1% | May 25, 2022 | In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a. |
| CVE-2022-29256 | MEDIUM | 6.7 | 0.4% | May 25, 2022 | sharp is an application for Node.js image processing. Prior to version 0.30.5, there is a possible vulnerability in logi... |
| CVE-2022-31624 | MEDIUM | 5.5 | 0.2% | May 25, 2022 | MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c me... |
| CVE-2022-31623 | MEDIUM | 5.5 | 0.2% | May 25, 2022 | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs... |
| CVE-2022-31622 | MEDIUM | 5.5 | 0.2% | May 25, 2022 | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs... |
| CVE-2022-31621 | MEDIUM | 5.5 | 0.2% | May 25, 2022 | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs... |
| CVE-2022-31620 | MEDIUM | 6.5 | 1.3% | May 25, 2022 | In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now