2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22262 | HIGH | 7.7 | 0.2% | Mar 1, 2022 | ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file ... |
| CVE-2022-25412 | HIGH | 8.1 | 1.0% | Feb 28, 2022 | Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-upd... |
| CVE-2022-23906 | HIGH | 7.2 | 2.1% | Feb 28, 2022 | CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar f... |
| CVE-2022-26181 | HIGH | 7.8 | 0.9% | Feb 28, 2022 | Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():sr... |
| CVE-2022-25023 | HIGH | 8.8 | 1.2% | Feb 28, 2022 | Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt():AudioFile.h. |
| CVE-2022-24712 | HIGH | 8.8 | 0.5% | Feb 28, 2022 | CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.... |
| CVE-2022-24685 | HIGH | 7.5 | 1.5% | Feb 28, 2022 | HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may ... |
| CVE-2022-23911 | HIGH | 7.2 | 1.4% | Feb 28, 2022 | The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before usin... |
| CVE-2022-0411 | HIGH | 8.8 | 1.5% | Feb 28, 2022 | The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a ... |
| CVE-2022-0383 | HIGH | 7.2 | 1.4% | Feb 28, 2022 | The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter ... |
| CVE-2022-26149 | HIGH | 7.2 | 9.3% | Feb 26, 2022 | MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an ex... |
| CVE-2022-24986 | HIGH | 7.8 | 0.2% | Feb 26, 2022 | KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. ... |
| CVE-2022-23308 | HIGH | 7.5 | 5.1% | Feb 26, 2022 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. |
| CVE-2022-25094 | HIGH | 8.8 | 23.3% | Feb 26, 2022 | Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via ... |
| CVE-2022-25264 | HIGH | 7.5 | 0.9% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases. |
| CVE-2022-25062 | HIGH | 7.5 | 4.5% | Feb 25, 2022 | TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This v... |
| CVE-2022-25170 | HIGH | 7.8 | 0.9% | Feb 25, 2022 | The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an a... |
| CVE-2022-23985 | HIGH | 7.8 | 1.8% | Feb 25, 2022 | The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to... |
| CVE-2022-23921 | HIGH | 7.8 | 0.2% | Feb 25, 2022 | Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitatio... |
| CVE-2022-21209 | HIGH | 7.8 | 1.8% | Feb 25, 2022 | The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to ... |
| CVE-2022-0615 | HIGH | 7.5 | 0.8% | Feb 25, 2022 | Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-... |
| CVE-2022-24346 | HIGH | 7.8 | 0.4% | Feb 25, 2022 | In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possibl... |
| CVE-2022-24345 | HIGH | 7.8 | 0.4% | Feb 25, 2022 | In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon opening a project... |
| CVE-2022-24342 | HIGH | 8.8 | 3.2% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible. |
| CVE-2022-24341 | HIGH | 7.5 | 0.7% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the ed... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now