2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26779 | HIGH | 7.5 | 2.8% | Mar 15, 2022 | Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project i... |
| CVE-2022-24756 | HIGH | 7.5 | 1.9% | Mar 15, 2022 | Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >... |
| CVE-2022-24721 | HIGH | 8.1 | 1.1% | Mar 15, 2022 | CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal ... |
| CVE-2022-0944 | HIGH | 7.2 | 8.7% | Mar 15, 2022 | Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1. |
| CVE-2022-24740 | HIGH | 7.5 | 0.6% | Mar 14, 2022 | Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-al... |
| CVE-2022-24743 | HIGH | 8.2 | 1.2% | Mar 14, 2022 | Sylius is an open source eCommerce platform. Prior to versions 1.10.11 and 1.11.2, the reset password token was not set ... |
| CVE-2022-0943 | HIGH | 7.8 | 0.7% | Mar 14, 2022 | Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. |
| CVE-2022-24578 | HIGH | 7.8 | 0.9% | Mar 14, 2022 | GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c. |
| CVE-2022-20001 | HIGH | 7.8 | 1.4% | Mar 14, 2022 | fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git re... |
| CVE-2022-22354 | HIGH | 7.5 | 0.9% | Mar 14, 2022 | IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do no... |
| CVE-2022-22346 | HIGH | 8.8 | 0.4% | Mar 14, 2022 | IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which co... |
| CVE-2022-24577 | HIGH | 7.8 | 1.2% | Mar 14, 2022 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen... |
| CVE-2022-22735 | HIGH | 8.8 | 1.3% | Mar 14, 2022 | The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX... |
| CVE-2022-0478 | HIGH | 8.8 | 1.5% | Mar 14, 2022 | The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the pos... |
| CVE-2022-24575 | HIGH | 7.8 | 0.9% | Mar 14, 2022 | GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box. |
| CVE-2022-24387 | HIGH | 7.2 | 1.5% | Mar 14, 2022 | With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, ... |
| CVE-2022-22719 | HIGH | 7.5 | 69.8% | Mar 14, 2022 | A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This i... |
| CVE-2022-26981 | HIGH | 7.8 | 1.5% | Mar 13, 2022 | Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by ... |
| CVE-2022-24696 | HIGH | 7.8 | 0.2% | Mar 13, 2022 | Mirametrix Glance before 5.1.1.42207 (released on 2018-08-30) allows a local attacker to elevate privileges. NOTE: this ... |
| CVE-2022-24128 | HIGH | 8 | 0.9% | Mar 13, 2022 | Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation. The install... |
| CVE-2022-26967 | HIGH | 7.8 | 0.9% | Mar 12, 2022 | GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box. |
| CVE-2022-24421 | HIGH | 7.8 | 0.3% | Mar 11, 2022 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl... |
| CVE-2022-24420 | HIGH | 7.8 | 0.3% | Mar 11, 2022 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl... |
| CVE-2022-24419 | HIGH | 7.8 | 0.3% | Mar 11, 2022 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl... |
| CVE-2022-24416 | HIGH | 7.8 | 0.3% | Mar 11, 2022 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now