2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40311 | MEDIUM | 4.8 | 0.4% | Oct 21, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress. |
| CVE-2022-3642 | — | — | — | Oct 21, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-3639 | HIGH | 7.5 | 0.8% | Oct 21, 2022 | A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all version... |
| CVE-2022-3627 | MEDIUM | 6.5 | 1.0% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, ... |
| CVE-2022-3626 | MEDIUM | 6.5 | 0.9% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections... |
| CVE-2022-3599 | MEDIUM | 6.5 | 0.9% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a de... |
| CVE-2022-3598 | MEDIUM | 6.5 | 0.9% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attacke... |
| CVE-2022-3597 | MEDIUM | 6.5 | 0.9% | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, ... |
| CVE-2022-3570 | MEDIUM | 5.5 | 0.5% | Oct 21, 2022 | Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe ... |
| CVE-2022-38104 | HIGH | 7.2 | 0.9% | Oct 21, 2022 | Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerabilit... |
| CVE-2022-27494 | MEDIUM | 5.4 | 0.6% | Oct 21, 2022 | Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely acce... |
| CVE-2022-26423 | HIGH | 7.5 | 0.7% | Oct 21, 2022 | Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely acce... |
| CVE-2022-1070 | HIGH | 8.1 | 0.7% | Oct 21, 2022 | Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely acce... |
| CVE-2022-1066 | HIGH | 8.2 | 0.7% | Oct 21, 2022 | Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely acce... |
| CVE-2022-1059 | MEDIUM | 6.1 | 0.6% | Oct 21, 2022 | Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely acce... |
| CVE-2022-3640 | HIGH | 8.8 | 1.1% | Oct 21, 2022 | A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of... |
| CVE-2022-43400 | CRITICAL | 9.8 | 0.9% | Oct 21, 2022 | A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)). The mobile... |
| CVE-2022-42206 | MEDIUM | 5.4 | 0.4% | Oct 21, 2022 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.p... |
| CVE-2022-42205 | MEDIUM | 5.4 | 0.4% | Oct 21, 2022 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php. |
| CVE-2022-3203 | CRITICAL | 9.8 | 0.9% | Oct 21, 2022 | On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. Y... |
| CVE-2022-42189 | HIGH | 7.2 | 1.4% | Oct 21, 2022 | Emlog Pro 1.6.0 plugins upload suffers from a remote code execution (RCE) vulnerability. |
| CVE-2022-41575 | HIGH | 7.5 | 0.7% | Oct 21, 2022 | A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows ... |
| CVE-2022-36122 | HIGH | 7.8 | 0.2% | Oct 21, 2022 | The Automox Agent before 40 on Windows incorrectly sets permissions on key files. |
| CVE-2022-3638 | — | — | — | Oct 21, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-3637 | MEDIUM | 5.5 | 0.3% | Oct 21, 2022 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jl... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now