2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22514 | HIGH | 7.1 | 0.9% | Apr 7, 2022 | An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can sub... |
| CVE-2022-0935 | HIGH | 8.8 | 1.3% | Apr 7, 2022 | Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97. |
| CVE-2022-0677 | HIGH | 7.5 | 1.2% | Apr 7, 2022 | Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint... |
| CVE-2022-26627 | HIGH | 8.8 | 1.4% | Apr 7, 2022 | Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows ... |
| CVE-2022-26607 | HIGH | 7.2 | 2.4% | Apr 6, 2022 | A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbit... |
| CVE-2022-26605 | HIGH | 8.8 | 1.0% | Apr 6, 2022 | eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality. |
| CVE-2022-26591 | HIGH | 7.5 | 1.1% | Apr 6, 2022 | FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a ... |
| CVE-2022-20774 | HIGH | 8.1 | 0.4% | Apr 6, 2022 | A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform F... |
| CVE-2022-20763 | HIGH | 8.8 | 0.9% | Apr 6, 2022 | A vulnerability in the login authorization components of Cisco Webex Meetings could allow an authenticated, remote attac... |
| CVE-2022-20762 | HIGH | 7.8 | 0.3% | Apr 6, 2022 | A vulnerability in the Common Execution Environment (CEE) ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices... |
| CVE-2022-20756 | HIGH | 7.5 | 1.4% | Apr 6, 2022 | A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote att... |
| CVE-2022-20755 | HIGH | 7.2 | 3.2% | Apr 6, 2022 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresenc... |
| CVE-2022-20754 | HIGH | 7.2 | 3.2% | Apr 6, 2022 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresenc... |
| CVE-2022-24822 | HIGH | 7.5 | 1.6% | Apr 6, 2022 | Podium is a library for building micro frontends. @podium/layout is a module for building a Podium layout server, and @p... |
| CVE-2022-22410 | HIGH | 7.2 | 0.7% | Apr 6, 2022 | IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information ... |
| CVE-2022-24793 | HIGH | 7.5 | 2.1% | Apr 6, 2022 | PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versio... |
| CVE-2022-1240 | HIGH | 7.8 | 0.7% | Apr 6, 2022 | Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address ... |
| CVE-2022-23440 | HIGH | 7.8 | 0.2% | Apr 6, 2022 | A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versi... |
| CVE-2022-1238 | HIGH | 7.8 | 0.8% | Apr 6, 2022 | Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability... |
| CVE-2022-1237 | HIGH | 7.8 | 0.8% | Apr 6, 2022 | Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap ove... |
| CVE-2022-1248 | HIGH | 7.3 | 1.3% | Apr 6, 2022 | A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the ... |
| CVE-2022-26110 | HIGH | 8.8 | 1.5% | Apr 6, 2022 | An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authen... |
| CVE-2022-26953 | HIGH | 7.5 | 1.8% | Apr 6, 2022 | Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page par... |
| CVE-2022-26952 | HIGH | 7.5 | 2.0% | Apr 6, 2022 | Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header... |
| CVE-2022-26251 | HIGH | 7.2 | 2.2% | Apr 6, 2022 | The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now