2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23635 | HIGH | 7.5 | 1.6% | Feb 22, 2022 | Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `i... |
| CVE-2022-23652 | HIGH | 8.8 | 1.4% | Feb 22, 2022 | capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0... |
| CVE-2022-0713 | HIGH | 7.1 | 1.0% | Feb 22, 2022 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
| CVE-2022-0676 | HIGH | 7.8 | 1.2% | Feb 22, 2022 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
| CVE-2022-24295 | HIGH | 8.8 | 17.9% | Feb 21, 2022 | Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection v... |
| CVE-2022-23984 | HIGH | 7.5 | 1.1% | Feb 21, 2022 | Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11). |
| CVE-2022-23983 | HIGH | 8.8 | 0.4% | Feb 21, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protecti... |
| CVE-2022-22308 | HIGH | 7.8 | 0.7% | Feb 21, 2022 | IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file inc... |
| CVE-2022-0255 | HIGH | 7.2 | 1.3% | Feb 21, 2022 | The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter befor... |
| CVE-2022-0228 | HIGH | 7.2 | 5.8% | Feb 21, 2022 | The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters b... |
| CVE-2022-0134 | HIGH | 8.8 | 0.6% | Feb 21, 2022 | The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features,... |
| CVE-2022-25297 | HIGH | 8.8 | 1.9% | Feb 21, 2022 | This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using Http... |
| CVE-2022-25372 | HIGH | 7.8 | 0.6% | Feb 20, 2022 | Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWN... |
| CVE-2022-0685 | HIGH | 7.8 | 1.8% | Feb 20, 2022 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418. |
| CVE-2022-23375 | HIGH | 8.8 | 19.9% | Feb 19, 2022 | WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious fil... |
| CVE-2022-0630 | HIGH | 7.1 | 1.0% | Feb 19, 2022 | Out-of-bounds Read in Homebrew mruby prior to 3.2. |
| CVE-2022-0409 | HIGH | 7.8 | 0.9% | Feb 19, 2022 | Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2. |
| CVE-2022-24980 | HIGH | 7.5 | 1.2% | Feb 19, 2022 | An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before ... |
| CVE-2022-25366 | HIGH | 7.8 | 0.5% | Feb 19, 2022 | Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has t... |
| CVE-2022-25365 | HIGH | 7.8 | 0.8% | Feb 19, 2022 | Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an i... |
| CVE-2022-23642 | HIGH | 8.8 | 74.3% | Feb 18, 2022 | Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execu... |
| CVE-2022-23650 | HIGH | 8.8 | 1.5% | Feb 18, 2022 | Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.... |
| CVE-2022-23228 | HIGH | 7.5 | 1.3% | Feb 18, 2022 | Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive re... |
| CVE-2022-24971 | HIGH | 8.8 | 2.5% | Feb 18, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.... |
| CVE-2022-24369 | HIGH | 8.8 | 2.4% | Feb 18, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now