2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21894 | MEDIUM | 4.4 | 6.6% | Jan 11, 2022 | Secure Boot Security Feature Bypass Vulnerability |
| CVE-2022-21892 | MEDIUM | 6.8 | 0.7% | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2022-21891 | MEDIUM | 4.3 | 1.5% | Jan 11, 2022 | Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability |
| CVE-2022-21877 | MEDIUM | 5.5 | 2.9% | Jan 11, 2022 | Storage Spaces Controller Information Disclosure Vulnerability |
| CVE-2022-21876 | MEDIUM | 5.5 | 1.3% | Jan 11, 2022 | Win32k Information Disclosure Vulnerability |
| CVE-2022-21847 | MEDIUM | 6.5 | 1.0% | Jan 11, 2022 | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2022-21839 | MEDIUM | 5.5 | 1.5% | Jan 11, 2022 | Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability |
| CVE-2022-0173 | MEDIUM | 5.5 | 1.1% | Jan 11, 2022 | radare2 is vulnerable to Out-of-bounds Read |
| CVE-2022-0129 | MEDIUM | 6.7 | 0.3% | Jan 11, 2022 | Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load... |
| CVE-2022-0170 | MEDIUM | 4.3 | 0.7% | Jan 11, 2022 | peertube is vulnerable to Improper Access Control |
| CVE-2022-21671 | MEDIUM | 6.5 | 1.1% | Jan 11, 2022 | @replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of... |
| CVE-2022-21672 | MEDIUM | 6.5 | 0.7% | Jan 10, 2022 | make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with vers... |
| CVE-2022-21670 | MEDIUM | 5.3 | 2.2% | Jan 10, 2022 | markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characte... |
| CVE-2022-0155 | MEDIUM | 6.5 | 2.4% | Jan 10, 2022 | follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor |
| CVE-2022-0174 | MEDIUM | 4.3 | 0.9% | Jan 10, 2022 | Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr. |
| CVE-2022-22120 | MEDIUM | 5.3 | 1.4% | Jan 10, 2022 | In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requestin... |
| CVE-2022-22117 | MEDIUM | 5.4 | 0.6% | Jan 10, 2022 | In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload func... |
| CVE-2022-22116 | MEDIUM | 5.4 | 0.6% | Jan 10, 2022 | In Directus, versions 9.0.0-alpha.4 through 9.4.1 are vulnerable to stored Cross-Site Scripting (XSS) vulnerability via ... |
| CVE-2022-0157 | MEDIUM | 5.4 | 1.1% | Jan 10, 2022 | phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'... |
| CVE-2022-0156 | MEDIUM | 5.5 | 1.7% | Jan 10, 2022 | vim is vulnerable to Use After Free |
| CVE-2022-22846 | MEDIUM | 5.3 | 0.8% | Jan 10, 2022 | The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a q... |
| CVE-2022-22844 | MEDIUM | 5.5 | 1.3% | Jan 10, 2022 | LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x... |
| CVE-2022-22836 | MEDIUM | 6.5 | 5.4% | Jan 10, 2022 | CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP... |
| CVE-2022-22821 | MEDIUM | 4.4 | 0.3% | Jan 10, 2022 | NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any... |
| CVE-2022-22816 | MEDIUM | 6.5 | 2.0% | Jan 10, 2022 | path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now