2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-24046 | HIGH | 8.8 | 3.8% | Feb 18, 2022 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Sp... |
| CVE-2022-25335 | HIGH | 7.5 | 1.3% | Feb 18, 2022 | RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipulat... |
| CVE-2022-23982 | HIGH | 7.5 | 1.2% | Feb 18, 2022 | The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) allows server inform... |
| CVE-2022-21176 | HIGH | 7.5 | 1.0% | Feb 18, 2022 | MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve... |
| CVE-2022-0646 | HIGH | 7.8 | 0.3% | Feb 18, 2022 | A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way ... |
| CVE-2022-0138 | HIGH | 7.5 | 1.0% | Feb 18, 2022 | MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve... |
| CVE-2022-0666 | HIGH | 7.5 | 44.3% | Feb 18, 2022 | CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist micro... |
| CVE-2022-25299 | HIGH | 7.5 | 1.4% | Feb 18, 2022 | This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_uplo... |
| CVE-2022-25298 | HIGH | 7.5 | 1.7% | Feb 18, 2022 | This affects the package sprinfall/webcc before 0.3.0. It is possible to traverse directories to fetch arbitrary files f... |
| CVE-2022-0660 | HIGH | 7.5 | 6.9% | Feb 18, 2022 | Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-25314 | HIGH | 7.5 | 4.7% | Feb 18, 2022 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. |
| CVE-2022-23646 | HIGH | 7.5 | 1.8% | Feb 17, 2022 | Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User In... |
| CVE-2022-22914 | HIGH | 7.5 | 1.4% | Feb 17, 2022 | An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to... |
| CVE-2022-24683 | HIGH | 7.5 | 1.5% | Feb 17, 2022 | HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec... |
| CVE-2022-23632 | HIGH | 7.5 | 1.7% | Feb 17, 2022 | Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.6.1, Traefik skips the router transport layer sec... |
| CVE-2022-20750 | HIGH | 7.5 | 1.1% | Feb 17, 2022 | A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager (RCM) for Cisco StarO... |
| CVE-2022-20653 | HIGH | 7.5 | 1.8% | Feb 17, 2022 | A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS S... |
| CVE-2022-23318 | HIGH | 7.1 | 0.8% | Feb 17, 2022 | A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially c... |
| CVE-2022-0629 | HIGH | 7.8 | 1.9% | Feb 17, 2022 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-25271 | HIGH | 7.5 | 1.2% | Feb 16, 2022 | Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to impro... |
| CVE-2022-24985 | HIGH | 8.8 | 2.3% | Feb 16, 2022 | Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and ... |
| CVE-2022-24983 | HIGH | 7.5 | 2.6% | Feb 16, 2022 | Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by cap... |
| CVE-2022-23636 | HIGH | 8.1 | 0.8% | Feb 16, 2022 | Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in th... |
| CVE-2022-25265 | HIGH | 7.8 | 1.1% | Feb 16, 2022 | In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approxim... |
| CVE-2022-25255 | HIGH | 7.8 | 0.3% | Feb 16, 2022 | In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from th... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now