2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43749 | HIGH | 8.8 | 0.6% | Oct 26, 2022 | Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-160... |
| CVE-2022-43748 | HIGH | 7.5 | 0.7% | Oct 26, 2022 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation managemen... |
| CVE-2022-2422 | CRITICAL | 9.8 | 0.7% | Oct 26, 2022 | Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the bac... |
| CVE-2022-2421 | CRITICAL | 9.8 | 1.1% | Oct 26, 2022 | Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeho... |
| CVE-2022-29823 | CRITICAL | 9.8 | 1.4% | Oct 26, 2022 | Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This... |
| CVE-2022-29822 | CRITICAL | 9.8 | 0.7% | Oct 26, 2022 | Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection |
| CVE-2022-31256 | HIGH | 7.8 | 0.2% | Oct 26, 2022 | A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail system... |
| CVE-2022-25849 | MEDIUM | 6.1 | 0.5% | Oct 26, 2022 | The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting (XSS) because the module of parse markdow... |
| CVE-2022-43750 | MEDIUM | 6.7 | 0.3% | Oct 26, 2022 | drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client t... |
| CVE-2022-43747 | CRITICAL | 9.8 | 0.9% | Oct 26, 2022 | baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execu... |
| CVE-2022-41711 | CRITICAL | 9.8 | 1.6% | Oct 25, 2022 | Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is... |
| CVE-2022-33185 | HIGH | 7.8 | 0.3% | Oct 25, 2022 | Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to proce... |
| CVE-2022-33184 | HIGH | 7.8 | 0.3% | Oct 25, 2022 | A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.... |
| CVE-2022-33183 | HIGH | 8.8 | 1.4% | Oct 25, 2022 | A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow... |
| CVE-2022-33182 | HIGH | 7.8 | 0.2% | Oct 25, 2022 | A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5... |
| CVE-2022-33181 | MEDIUM | 5.5 | 0.2% | Oct 25, 2022 | An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0c... |
| CVE-2022-33180 | MEDIUM | 5.5 | 0.2% | Oct 25, 2022 | A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a local ... |
| CVE-2022-33179 | HIGH | 8.8 | 0.2% | Oct 25, 2022 | A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local... |
| CVE-2022-33178 | HIGH | 7.2 | 1.3% | Oct 25, 2022 | A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remo... |
| CVE-2022-28170 | MEDIUM | 6.5 | 0.2% | Oct 25, 2022 | Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user... |
| CVE-2022-28169 | HIGH | 8.8 | 0.7% | Oct 25, 2022 | Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allo... |
| CVE-2022-39354 | HIGH | 7.5 | 0.5% | Oct 25, 2022 | SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use t... |
| CVE-2022-38181 | HIGH | 8.8 | 12.6% | Oct 25, 2022 | The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan... |
| CVE-2022-38162 | MEDIUM | 6.1 | 0.7% | Oct 25, 2022 | Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy... |
| CVE-2022-36452 | CRITICAL | 9.8 | 0.8% | Oct 25, 2022 | A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated att... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now