2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22351 | HIGH | 8.6 | 1.1% | Mar 7, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a vulnerability in the nim... |
| CVE-2022-0440 | HIGH | 7.2 | 1.4% | Mar 7, 2022 | The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could... |
| CVE-2022-0439 | HIGH | 8.8 | 4.2% | Mar 7, 2022 | The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the `order` and `orderby` pa... |
| CVE-2022-0420 | HIGH | 7.2 | 1.5% | Mar 7, 2022 | The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using... |
| CVE-2022-0410 | HIGH | 8.8 | 1.3% | Mar 7, 2022 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter ... |
| CVE-2022-0267 | HIGH | 7.2 | 1.3% | Mar 7, 2022 | The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL st... |
| CVE-2022-26505 | HIGH | 7.4 | 1.6% | Mar 6, 2022 | A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media file... |
| CVE-2022-26490 | HIGH | 7.8 | 0.4% | Mar 6, 2022 | st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTIO... |
| CVE-2022-24921 | HIGH | 7.5 | 3.2% | Mar 5, 2022 | regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression. |
| CVE-2022-25465 | HIGH | 7.8 | 0.7% | Mar 5, 2022 | Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling. |
| CVE-2022-25044 | HIGH | 7.8 | 0.9% | Mar 5, 2022 | Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString. |
| CVE-2022-23915 | HIGH | 8.8 | 2.9% | Mar 4, 2022 | The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE) via argument injection when u... |
| CVE-2022-23233 | HIGH | 7.5 | 0.9% | Mar 4, 2022 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when succe... |
| CVE-2022-25623 | HIGH | 7.8 | 0.3% | Mar 4, 2022 | The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can ... |
| CVE-2022-21828 | HIGH | 7.2 | 3.7% | Mar 4, 2022 | A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connec... |
| CVE-2022-23729 | HIGH | 7.8 | 0.1% | Mar 4, 2022 | When the device is in factory state, it can be access the shell without adb authentication process. The LG ID is LVE-SMP... |
| CVE-2022-23328 | HIGH | 7.5 | 1.8% | Mar 4, 2022 | A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas pri... |
| CVE-2022-23327 | HIGH | 7.5 | 1.8% | Mar 4, 2022 | A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a ... |
| CVE-2022-21716 | HIGH | 7.5 | 3.6% | Mar 3, 2022 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH clie... |
| CVE-2022-0492 | HIGH | 7.8 | 5.5% | Mar 3, 2022 | A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th... |
| CVE-2022-26129 | HIGH | 7.8 | 1.0% | Mar 3, 2022 | Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functio... |
| CVE-2022-26128 | HIGH | 7.8 | 1.0% | Mar 3, 2022 | A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the... |
| CVE-2022-26127 | HIGH | 7.8 | 1.0% | Mar 3, 2022 | A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in t... |
| CVE-2022-26126 | HIGH | 7.8 | 1.1% | Mar 3, 2022 | Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated bin... |
| CVE-2022-26125 | HIGH | 7.8 | 1.0% | Mar 3, 2022 | Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now