2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0270 | HIGH | 8.8 | 0.9% | Jan 25, 2022 | Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override as... |
| CVE-2022-0351 | HIGH | 7.8 | 0.6% | Jan 25, 2022 | Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-23033 | HIGH | 7.8 | 0.3% | Jan 25, 2022 | arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2... |
| CVE-2022-21697 | HIGH | 7.1 | 1.1% | Jan 25, 2022 | Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prio... |
| CVE-2022-23945 | HIGH | 7.5 | 3.8% | Jan 25, 2022 | Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1. |
| CVE-2022-23223 | HIGH | 7.5 | 4.3% | Jan 25, 2022 | On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are rec... |
| CVE-2022-23935 | HIGH | 7.8 | 7.6% | Jan 25, 2022 | lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection. |
| CVE-2022-21711 | HIGH | 7.1 | 0.9% | Jan 24, 2022 | elfspirit is an ELF static analysis and injection framework that parses, manipulates, and camouflages ELF files. When an... |
| CVE-2022-0269 | HIGH | 8 | 0.5% | Jan 24, 2022 | Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0. |
| CVE-2022-23858 | HIGH | 8.8 | 1.1% | Jan 24, 2022 | A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges ... |
| CVE-2022-23850 | HIGH | 7.8 | 0.9% | Jan 23, 2022 | xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a cr... |
| CVE-2022-21707 | HIGH | 8.1 | 0.9% | Jan 21, 2022 | wasmCloud Host Runtime is a server process that securely hosts and provides dispatch for web assembly (WASM) actors and ... |
| CVE-2022-23837 | HIGH | 7.5 | 5.3% | Jan 21, 2022 | In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the grap... |
| CVE-2022-22551 | HIGH | 8.8 | 0.4% | Jan 21, 2022 | DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated a... |
| CVE-2022-0323 | HIGH | 8.8 | 0.7% | Jan 21, 2022 | Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1. |
| CVE-2022-23220 | HIGH | 7.8 | 0.5% | Jan 21, 2022 | USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because ... |
| CVE-2022-21933 | HIGH | 7.8 | 0.3% | Jan 21, 2022 | ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can ... |
| CVE-2022-22895 | HIGH | 7.8 | 0.8% | Jan 21, 2022 | Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-cor... |
| CVE-2022-22894 | HIGH | 7.8 | 0.7% | Jan 21, 2022 | Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache... |
| CVE-2022-22893 | HIGH | 7.8 | 0.7% | Jan 21, 2022 | Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c. |
| CVE-2022-22888 | HIGH | 7.8 | 0.7% | Jan 20, 2022 | Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-object... |
| CVE-2022-23120 | HIGH | 7.8 | 6.4% | Jan 20, 2022 | A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20... |
| CVE-2022-23119 | HIGH | 7.5 | 22.3% | Jan 20, 2022 | A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux versi... |
| CVE-2022-0282 | HIGH | 7.5 | 1.6% | Jan 20, 2022 | Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-0281 | HIGH | 7.5 | 12.0% | Jan 20, 2022 | Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now