2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-21957HIGH7.2Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2022-21927HIGH7.8HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-21926HIGH7.8HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-21844HIGH7.8HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-0538HIGH7.5Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply...
CVE-2022-24676HIGH8.8update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.
CVE-2022-23626HIGH8.8m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` ...
CVE-2022-0524HIGH7.5Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.
CVE-2022-21703HIGH8.8Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site reque...
CVE-2022-0523HIGH7.8Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0522HIGH7.1Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.
CVE-2022-0521HIGH7.1Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0520HIGH7.8Use After Free in NPM radare2.js prior to 5.6.2.
CVE-2022-0519HIGH7.1Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0518HIGH7.1Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-23331HIGH8.8In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the admini...
CVE-2022-21193HIGH7.5Directory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to obtain an a...
CVE-2022-21173HIGH8.8Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1....
CVE-2022-24450HIGH8.8NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the Syst...
CVE-2022-23624HIGH8.8Frourio-express is a minimal full stack framework, for TypeScript. Frourio-express users who uses frourio-express versio...
CVE-2022-23623HIGH8.8Frourio is a full stack framework, for TypeScript. Frourio users who uses frourio version prior to v0.26.0 and integrati...
CVE-2022-23613HIGH7.8xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap...
CVE-2022-21712HIGH7.5twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authori...
CVE-2022-23263HIGH7.7Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-23320HIGH7.5XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application s...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now