2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-0891HIGH7.1A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to...
CVE-2022-0847HIGH7.8A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop...
CVE-2022-0813HIGH7.5PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid request...
CVE-2022-0725HIGH7.5A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to...
CVE-2022-0618HIGH7.5A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a speciall...
CVE-2022-0516HIGH7.8A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linu...
CVE-2022-0507HIGH8.8Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG ...
CVE-2022-0204HIGH8.8A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could ...
CVE-2022-0905HIGH7.1Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.
CVE-2022-24753HIGH7Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows whe...
CVE-2022-24748HIGH7.5Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In versions p...
CVE-2022-24734HIGH7.2MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not v...
CVE-2022-24732HIGH8.8Maddy Mail Server is an open source SMTP compatible email server. Versions of maddy prior to 0.5.4 do not implement pass...
CVE-2022-24525HIGH7Windows Update Stack Elevation of Privilege Vulnerability
CVE-2022-24520HIGH7.2Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-24517HIGH7.2Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-24510HIGH7.8Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-24509HIGH7.8Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-24508HIGH8.8Win32 File Enumeration Remote Code Execution Vulnerability
CVE-2022-24507HIGH7.8Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2022-24505HIGH7Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-24501HIGH7.8VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2022-24471HIGH7.2Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-24470HIGH7.2Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-24469HIGH8.1Azure Site Recovery Elevation of Privilege Vulnerability

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now