2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-25291HIGH8.8An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-b...
CVE-2022-25104HIGH7.5HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/fi...
CVE-2022-25101HIGH7.8A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code vi...
CVE-2022-25099HIGH7.8A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via ...
CVE-2022-24610HIGH8.6Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi ...
CVE-2022-24407HIGH8.8In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE...
CVE-2022-23986HIGH7.5SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the i...
CVE-2022-23176HIGH8.8WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a ...
CVE-2022-23043HIGH7.2Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Ty...
CVE-2022-25331HIGH7.5Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remot...
CVE-2022-24680HIGH7.8A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Se...
CVE-2022-24679HIGH7.8A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Se...
CVE-2022-24678HIGH7.5An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a...
CVE-2022-24671HIGH7.8A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a l...
CVE-2022-24409HIGH7.5Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users...
CVE-2022-22336HIGH7.5IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a re...
CVE-2022-21705HIGH7.2Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. In affected versions user input was not pro...
CVE-2022-20650HIGH8.8A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute a...
CVE-2022-20624HIGH7.5A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthentic...
CVE-2022-20623HIGH7.5A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cis...
CVE-2022-0729HIGH8.8Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
CVE-2022-0736HIGH7.5Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.
CVE-2022-0654HIGH7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7....
CVE-2022-23612HIGH7.5OpenMRS is a patient-based medical record system focusing on giving providers a free customizable electronic medical rec...
CVE-2022-21655HIGH7.5Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will seg...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now