2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0551 | HIGH | 7.2 | 0.9% | Mar 24, 2022 | Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticat... |
| CVE-2022-0550 | HIGH | 7.2 | 0.9% | Mar 24, 2022 | Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an auth... |
| CVE-2022-1061 | HIGH | 7.5 | 0.9% | Mar 24, 2022 | Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8. |
| CVE-2022-0315 | HIGH | 7.5 | 0.9% | Mar 24, 2022 | Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0. |
| CVE-2022-25268 | HIGH | 8.8 | 0.4% | Mar 23, 2022 | Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems. |
| CVE-2022-25267 | HIGH | 8.8 | 1.4% | Mar 23, 2022 | Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files). |
| CVE-2022-27192 | HIGH | 7.5 | 1.1% | Mar 23, 2022 | The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file downl... |
| CVE-2022-24768 | HIGH | 8.8 | 1.2% | Mar 23, 2022 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All unpatched versions of Argo CD starting wit... |
| CVE-2022-22819 | HIGH | 7.8 | 1.3% | Mar 23, 2022 | NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM... |
| CVE-2022-24757 | HIGH | 7.5 | 1.2% | Mar 23, 2022 | The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications.... |
| CVE-2022-24291 | HIGH | 7.5 | 4.4% | Mar 23, 2022 | Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execut... |
| CVE-2022-1030 | HIGH | 8.8 | 1.5% | Mar 23, 2022 | Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command inj... |
| CVE-2022-0981 | HIGH | 8.8 | 1.1% | Mar 23, 2022 | A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another i... |
| CVE-2022-26243 | HIGH | 7.5 | 1.2% | Mar 23, 2022 | Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow in the setSmartPowerManagement function. |
| CVE-2022-0635 | HIGH | 7.5 | 1.3% | Mar 23, 2022 | Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named proce... |
| CVE-2022-1033 | HIGH | 7.8 | 0.9% | Mar 23, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6. |
| CVE-2022-27666 | HIGH | 7.8 | 5.5% | Mar 23, 2022 | A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw... |
| CVE-2022-1031 | HIGH | 7.8 | 1.0% | Mar 22, 2022 | Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6. |
| CVE-2022-24774 | HIGH | 8.1 | 1.4% | Mar 22, 2022 | CycloneDX BOM Repository Server is a bill of materials (BOM) repository server for distributing CycloneDX BOMs. CycloneD... |
| CVE-2022-24764 | HIGH | 7.5 | 2.3% | Mar 22, 2022 | PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack b... |
| CVE-2022-1036 | HIGH | 7.5 | 1.2% | Mar 22, 2022 | Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweb... |
| CVE-2022-0667 | HIGH | 7.5 | 1.3% | Mar 22, 2022 | When the vulnerability is triggered the BIND process will exit. BIND 9.18.0 |
| CVE-2022-1034 | HIGH | 7.2 | 1.5% | Mar 22, 2022 | There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.... |
| CVE-2022-0652 | HIGH | 7.8 | 0.2% | Mar 22, 2022 | Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. Th... |
| CVE-2022-0386 | HIGH | 8.8 | 1.2% | Mar 22, 2022 | A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now