2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22531 | HIGH | 8.1 | 0.8% | Jan 14, 2022 | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check ... |
| CVE-2022-22530 | HIGH | 8.1 | 0.9% | Jan 14, 2022 | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check ... |
| CVE-2022-21137 | HIGH | 7.8 | 9.3% | Jan 14, 2022 | Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project f... |
| CVE-2022-0130 | HIGH | 8.1 | 1.6% | Jan 14, 2022 | Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow ... |
| CVE-2022-21681 | HIGH | 7.5 | 2.7% | Jan 14, 2022 | Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cau... |
| CVE-2022-21680 | HIGH | 7.5 | 2.8% | Jan 14, 2022 | Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastro... |
| CVE-2022-23222 | HIGH | 7.8 | 1.9% | Jan 14, 2022 | kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availabil... |
| CVE-2022-20698 | HIGH | 7.5 | 3.1% | Jan 14, 2022 | A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 ... |
| CVE-2022-22991 | HIGH | 8.8 | 1.3% | Jan 13, 2022 | A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device int... |
| CVE-2022-22990 | HIGH | 8.8 | 2.1% | Jan 13, 2022 | A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code executi... |
| CVE-2022-21684 | HIGH | 8.8 | 1.0% | Jan 13, 2022 | Discourse is an open source discussion platform. Versions prior to 2.7.13 in `stable`, 2.8.0.beta11 in `beta`, and 2.8.0... |
| CVE-2022-23132 | HIGH | 7.3 | 0.8% | Jan 13, 2022 | During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] ... |
| CVE-2022-22113 | HIGH | 8.8 | 1.0% | Jan 13, 2022 | In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a passwor... |
| CVE-2022-0198 | HIGH | 7.1 | 0.7% | Jan 13, 2022 | corenlp is vulnerable to Improper Restriction of XML External Entity Reference |
| CVE-2022-0197 | HIGH | 8.8 | 0.8% | Jan 13, 2022 | phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2022-0196 | HIGH | 8.8 | 0.7% | Jan 13, 2022 | phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2022-23118 | HIGH | 8.8 | 1.6% | Jan 12, 2022 | Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-l... |
| CVE-2022-23117 | HIGH | 7.5 | 1.3% | Jan 12, 2022 | Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent pro... |
| CVE-2022-23116 | HIGH | 7.5 | 0.8% | Jan 12, 2022 | Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent pro... |
| CVE-2022-23107 | HIGH | 8.1 | 1.9% | Jan 12, 2022 | Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ... |
| CVE-2022-20619 | HIGH | 7.1 | 0.7% | Jan 12, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlie... |
| CVE-2022-20617 | HIGH | 8.8 | 2.3% | Jan 12, 2022 | Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS comma... |
| CVE-2022-21676 | HIGH | 7.5 | 2.8% | Jan 12, 2022 | Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Soc... |
| CVE-2022-21675 | HIGH | 7.8 | 2.5% | Jan 12, 2022 | Bytecode Viewer (BCV) is a Java/Android reverse engineering suite. Versions of the package prior to 2.11.0 are vulnerabl... |
| CVE-2022-0015 | HIGH | 7.8 | 0.2% | Jan 12, 2022 | A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authen... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now