2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21600 | HIGH | 7.2 | 1.2% | Oct 18, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af... |
| CVE-2022-21599 | MEDIUM | 4.9 | 1.2% | Oct 18, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that... |
| CVE-2022-21598 | HIGH | 7.5 | 0.6% | Oct 18, 2022 | Vulnerability in the Siebel Core - DB Deployment and Configuration product of Oracle Siebel CRM (component: Repository U... |
| CVE-2022-21597 | MEDIUM | 5.3 | 0.8% | Oct 18, 2022 | Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaScript). Supported vers... |
| CVE-2022-21596 | HIGH | 7.2 | 0.8% | Oct 18, 2022 | Vulnerability in the Oracle Database - Advanced Queuing component of Oracle Database Server. The supported version that ... |
| CVE-2022-21595 | MEDIUM | 4.4 | 1.0% | Oct 18, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are 5... |
| CVE-2022-21594 | MEDIUM | 4.9 | 1.2% | Oct 18, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af... |
| CVE-2022-21593 | HIGH | 7.1 | 0.6% | Oct 18, 2022 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OHS Config MBeans). Supported ve... |
| CVE-2022-21592 | MEDIUM | 4.3 | 0.7% | Oct 18, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions ... |
| CVE-2022-21591 | MEDIUM | 5.4 | 0.5% | Oct 18, 2022 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). Sup... |
| CVE-2022-21590 | HIGH | 7.6 | 0.6% | Oct 18, 2022 | Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Core Formatting API). Supported... |
| CVE-2022-21589 | MEDIUM | 4.3 | 0.9% | Oct 18, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions ... |
| CVE-2022-21587 | CRITICAL | 9.8 | 98.3% | Oct 18, 2022 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). ... |
| CVE-2022-3595 | MEDIUM | 5.5 | 0.3% | Oct 18, 2022 | A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sess... |
| CVE-2022-3594 | MEDIUM | 5.3 | 2.5% | Oct 18, 2022 | A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the fu... |
| CVE-2022-3593 | — | — | — | Oct 18, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-42188 | HIGH | 7.5 | 0.9% | Oct 18, 2022 | In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary file... |
| CVE-2022-39198 | CRITICAL | 9.8 | 2.4% | Oct 18, 2022 | A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to malic... |
| CVE-2022-43260 | CRITICAL | 9.8 | 0.8% | Oct 18, 2022 | Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime fu... |
| CVE-2022-43259 | HIGH | 7.5 | 0.7% | Oct 18, 2022 | Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_w... |
| CVE-2022-41547 | HIGH | 7.5 | 1.2% | Oct 18, 2022 | Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability ... |
| CVE-2022-41544 | CRITICAL | 9.8 | 9.4% | Oct 18, 2022 | GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file paramete... |
| CVE-2022-41541 | HIGH | 8.1 | 1.1% | Oct 18, 2022 | TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authent... |
| CVE-2022-41540 | MEDIUM | 5.9 | 1.1% | Oct 18, 2022 | The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. At... |
| CVE-2022-41537 | HIGH | 7.2 | 1.1% | Oct 18, 2022 | Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the c... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now