2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-22173HIGH7.5A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Jun...
CVE-2022-22171HIGH7.5An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N...
CVE-2022-22170HIGH7.5A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Ne...
CVE-2022-22162HIGH7.8A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS all...
CVE-2022-22161HIGH7.5An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated ...
CVE-2022-22159HIGH7.5A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel allows an attacker to caus...
CVE-2022-22156HIGH7.4An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the...
CVE-2022-22153HIGH7.5An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerabili...
CVE-2022-21689HIGH7.5OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with frien...
CVE-2022-22691HIGH7.4The password reset component deployed within Umbraco uses the hostname supplied within the request host header when buil...
CVE-2022-22690HIGH7.5Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" (or just "ApplicationUrl") is used wheneve...
CVE-2022-0244HIGH7.5An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible...
CVE-2022-0236HIGH7.5The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data d...
CVE-2022-0215HIGH8.8The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plug...
CVE-2022-0154HIGH8An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting fro...
CVE-2022-23307HIGH8.8CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw wa...
CVE-2022-23302HIGH8.8JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write acce...
CVE-2022-0263HIGH7.8Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.
CVE-2022-0261HIGH7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0242HIGH7.2Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.
CVE-2022-0258HIGH8.8pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-0240HIGH7.5mruby is vulnerable to NULL Pointer Dereference
CVE-2022-0180HIGH8.8Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attack...
CVE-2022-23095HIGH7.8Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a craf...
CVE-2022-23094HIGH7.5Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cras...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now