2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3084 | HIGH | 7.8 | 0.2% | Dec 8, 2022 | GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmi... |
| CVE-2022-2952 | HIGH | 7.8 | 0.2% | Dec 7, 2022 | GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gm... |
| CVE-2022-2948 | HIGH | 7.8 | 0.2% | Dec 7, 2022 | GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to e... |
| CVE-2022-2002 | HIGH | 7.8 | 0.3% | Dec 7, 2022 | GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gm... |
| CVE-2022-23471 | MEDIUM | 6.5 | 1.0% | Dec 7, 2022 | containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exha... |
| CVE-2022-23491 | HIGH | 7.5 | 0.5% | Dec 7, 2022 | Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verify... |
| CVE-2022-4341 | MEDIUM | 6.1 | 0.4% | Dec 7, 2022 | A vulnerability has been found in csliuwy coder-chain_gdut and classified as problematic. Affected by this vulnerability... |
| CVE-2022-23487 | HIGH | 7.5 | 0.7% | Dec 7, 2022 | js-libp2p is the official javascript Implementation of libp2p networking stack. Versions older than `v0.38.0` of js-libp... |
| CVE-2022-23486 | HIGH | 7.5 | 0.7% | Dec 7, 2022 | libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.45.1 an ... |
| CVE-2022-46770 | HIGH | 7.5 | 21.5% | Dec 7, 2022 | qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of s... |
| CVE-2022-45550 | CRITICAL | 9.8 | 1.5% | Dec 7, 2022 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). |
| CVE-2022-44373 | HIGH | 8.8 | 1.4% | Dec 7, 2022 | A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1.0R, firmware version 1... |
| CVE-2022-44351 | CRITICAL | 9.8 | 0.9% | Dec 7, 2022 | Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php. |
| CVE-2022-43581 | HIGH | 8.8 | 0.7% | Dec 7, 2022 | IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 i... |
| CVE-2022-44393 | HIGH | 7.2 | 0.8% | Dec 7, 2022 | Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/view_service&id=. |
| CVE-2022-44371 | CRITICAL | 9.8 | 1.3% | Dec 7, 2022 | hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE). |
| CVE-2022-44361 | MEDIUM | 5.4 | 0.4% | Dec 7, 2022 | An issue was discovered in ZZCMS 2022. There is a cross-site scripting (XSS) vulnerability in admin/ad_list.php. |
| CVE-2022-41735 | MEDIUM | 6.1 | 0.4% | Dec 7, 2022 | IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable ... |
| CVE-2022-41720 | HIGH | 7.5 | 1.2% | Dec 7, 2022 | On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide ... |
| CVE-2022-45217 | MEDIUM | 5.4 | 0.5% | Dec 7, 2022 | A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary ... |
| CVE-2022-45910 | MEDIUM | 5.3 | 1.5% | Dec 7, 2022 | Improper neutralization of special elements used in an LDAP query ('LDAP Injection') vulnerability in ActiveDirectory an... |
| CVE-2022-42458 | CRITICAL | 9.8 | 1.1% | Dec 7, 2022 | Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a ... |
| CVE-2022-40966 | HIGH | 8.8 | 0.3% | Dec 7, 2022 | Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass aut... |
| CVE-2022-39044 | MEDIUM | 6.8 | 0.3% | Dec 7, 2022 | Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an admini... |
| CVE-2022-34840 | MEDIUM | 6.5 | 0.2% | Dec 7, 2022 | Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to al... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now