2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-24073 | HIGH | 7.1 | 0.6% | Mar 17, 2022 | The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any... |
| CVE-2022-25514 | HIGH | 7.5 | 1.0% | Mar 17, 2022 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOT... |
| CVE-2022-26534 | HIGH | 7.5 | 1.0% | Mar 17, 2022 | FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a malicious viewchange packe... |
| CVE-2022-26300 | HIGH | 7.5 | 1.2% | Mar 17, 2022 | EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txn_test_gen_plugin. |
| CVE-2022-23610 | HIGH | 8.1 | 0.7% | Mar 16, 2022 | wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-... |
| CVE-2022-24729 | HIGH | 7.5 | 2.4% | Mar 16, 2022 | CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulne... |
| CVE-2022-21164 | HIGH | 7.5 | 1.3% | Mar 16, 2022 | The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString valu... |
| CVE-2022-26660 | HIGH | 7.5 | 0.6% | Mar 16, 2022 | RunAsSpc 4.0 uses a universal and recoverable encryption key. In possession of a file encrypted by RunAsSpc, an attacker... |
| CVE-2022-26353 | HIGH | 7.5 | 2.7% | Mar 16, 2022 | A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748... |
| CVE-2022-25252 | HIGH | 7.5 | 1.5% | Mar 16, 2022 | When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when re... |
| CVE-2022-25250 | HIGH | 7.5 | 1.6% | Mar 16, 2022 | When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may all... |
| CVE-2022-25249 | HIGH | 7.5 | 2.4% | Mar 16, 2022 | When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disreg... |
| CVE-2022-25246 | HIGH | 8.8 | 1.7% | Mar 16, 2022 | Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its Ultra... |
| CVE-2022-0918 | HIGH | 7.5 | 5.9% | Mar 16, 2022 | A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access t... |
| CVE-2022-0811 | HIGH | 8.8 | 18.6% | Mar 16, 2022 | A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a p... |
| CVE-2022-24751 | HIGH | 7.4 | 0.9% | Mar 16, 2022 | Zulip is an open source group chat application. Starting with version 4.0 and prior to version 4.11, Zulip is vulnerable... |
| CVE-2022-27223 | HIGH | 8.8 | 2.1% | Mar 16, 2022 | In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might... |
| CVE-2022-23989 | HIGH | 7.5 | 0.9% | Mar 15, 2022 | In Stormshield Network Security (SNS) before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x b... |
| CVE-2022-25491 | HIGH | 7.5 | 1.5% | Mar 15, 2022 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php. |
| CVE-2022-25486 | HIGH | 7.8 | 10.0% | Mar 15, 2022 | CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php. |
| CVE-2022-25485 | HIGH | 7.8 | 7.9% | Mar 15, 2022 | CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php. |
| CVE-2022-27204 | HIGH | 8.8 | 0.6% | Mar 15, 2022 | A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier al... |
| CVE-2022-27198 | HIGH | 8 | 0.5% | Mar 15, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earl... |
| CVE-2022-22771 | HIGH | 8.8 | 2.1% | Mar 15, 2022 | The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix ... |
| CVE-2022-0778 | HIGH | 7.5 | 73.2% | Mar 15, 2022 | The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for n... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now