2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40259 | CRITICAL | 9.8 | 0.6% | Dec 5, 2022 | MegaRAC Default Credentials Vulnerability |
| CVE-2022-40242 | CRITICAL | 9.8 | 0.7% | Dec 5, 2022 | MegaRAC Default Credentials Vulnerability |
| CVE-2022-35260 | MEDIUM | 6.5 | 1.9% | Dec 5, 2022 | curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white sp... |
| CVE-2022-35259 | HIGH | 7.8 | 0.7% | Dec 5, 2022 | XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute... |
| CVE-2022-35258 | HIGH | 7.5 | 2.5% | Dec 5, 2022 | An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in vers... |
| CVE-2022-35256 | MEDIUM | 6.5 | 2.6% | Dec 5, 2022 | The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated wit... |
| CVE-2022-35255 | CRITICAL | 9.1 | 1.9% | Dec 5, 2022 | A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretK... |
| CVE-2022-35254 | HIGH | 7.5 | 2.5% | Dec 5, 2022 | An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in vers... |
| CVE-2022-32224 | CRITICAL | 9.8 | 2.4% | Dec 5, 2022 | A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.... |
| CVE-2022-32221 | CRITICAL | 9.8 | 4.7% | Dec 5, 2022 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data t... |
| CVE-2022-30123 | CRITICAL | 10 | 1.8% | Dec 5, 2022 | A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell ... |
| CVE-2022-30122 | HIGH | 7.5 | 2.1% | Dec 5, 2022 | A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing compo... |
| CVE-2022-2827 | HIGH | 7.5 | 1.7% | Dec 5, 2022 | AMI MegaRAC User Enumeration Vulnerability |
| CVE-2022-27773 | CRITICAL | 9.8 | 2.6% | Dec 5, 2022 | A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execut... |
| CVE-2022-23143 | MEDIUM | 6.5 | 0.6% | Dec 5, 2022 | ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an a... |
| CVE-2022-46169 | CRITICAL | 9.8 | 99.8% | Dec 5, 2022 | Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management fram... |
| CVE-2022-46164 | CRITICAL | 9.8 | 49.0% | Dec 5, 2022 | NodeBB is an open source Node.js based forum software. Due to a plain object with a prototype being used in socket.io me... |
| CVE-2022-45481 | CRITICAL | 9.8 | 1.6% | Dec 5, 2022 | The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute ar... |
| CVE-2022-45479 | CRITICAL | 9.8 | 1.6% | Dec 5, 2022 | PC Keyboard allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any... |
| CVE-2022-44039 | CRITICAL | 9.8 | 1.0% | Dec 5, 2022 | Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrit... |
| CVE-2022-42706 | MEDIUM | 4.9 | 1.1% | Dec 5, 2022 | An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified throu... |
| CVE-2022-42705 | MEDIUM | 6.5 | 1.2% | Dec 5, 2022 | A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remo... |
| CVE-2022-37783 | HIGH | 7.5 | 1.0% | Dec 5, 2022 | All Craft CMS versions between 3.0.0 and 3.7.32 disclose password hashes of users who authenticate using their E-Mail ad... |
| CVE-2022-37325 | HIGH | 7.5 | 1.0% | Dec 5, 2022 | In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message t... |
| CVE-2022-45771 | HIGH | 8.8 | 1.8% | Dec 5, 2022 | An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary cod... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now