2022 CVE Vulnerabilities
27,565 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39288 | HIGH | 7.5 | 59.2% | Oct 10, 2022 | fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of s... |
| CVE-2022-36063 | CRITICAL | 9.8 | 1.5% | Oct 10, 2022 | Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and ... |
| CVE-2022-34425 | HIGH | 7.5 | 0.7% | Oct 10, 2022 | Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote atta... |
| CVE-2022-34402 | MEDIUM | 4.9 | 0.6% | Oct 10, 2022 | Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker c... |
| CVE-2022-34334 | MEDIUM | 6.5 | 0.3% | Oct 10, 2022 | IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated ... |
| CVE-2022-2981 | MEDIUM | 4.9 | 0.9% | Oct 10, 2022 | The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog fold... |
| CVE-2022-2891 | MEDIUM | 5.9 | 0.7% | Oct 10, 2022 | The WP 2FA WordPress plugin before 2.3.0 uses comparison operators that don't mitigate time-based attacks, which could b... |
| CVE-2022-2823 | MEDIUM | 4.8 | 0.5% | Oct 10, 2022 | The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its ... |
| CVE-2022-2629 | MEDIUM | 4.8 | 0.5% | Oct 10, 2022 | The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in fr... |
| CVE-2022-2554 | MEDIUM | 4.9 | 0.8% | Oct 10, 2022 | The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder... |
| CVE-2022-2448 | MEDIUM | 4.8 | 0.5% | Oct 10, 2022 | The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high p... |
| CVE-2022-2350 | MEDIUM | 5.3 | 0.4% | Oct 10, 2022 | The Disable User Login WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating its sett... |
| CVE-2022-20944 | MEDIUM | 6.8 | 0.2% | Oct 10, 2022 | A vulnerability in the software image verification functionality of Cisco IOS XE Software for Cisco Catalyst 9200 Series... |
| CVE-2022-20920 | HIGH | 7.7 | 0.8% | Oct 10, 2022 | A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, ... |
| CVE-2022-20915 | HIGH | 7.4 | 0.3% | Oct 10, 2022 | A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Softw... |
| CVE-2022-20870 | HIGH | 8.6 | 0.8% | Oct 10, 2022 | A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst... |
| CVE-2022-20864 | MEDIUM | 4.6 | 0.3% | Oct 10, 2022 | A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalys... |
| CVE-2022-20837 | HIGH | 8.6 | 0.9% | Oct 10, 2022 | A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NA... |
| CVE-2022-20830 | MEDIUM | 5.3 | 0.7% | Oct 10, 2022 | A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cis... |
| CVE-2022-40257 | MEDIUM | 5.4 | 0.4% | Oct 10, 2022 | An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject a... |
| CVE-2022-40248 | MEDIUM | 5.4 | 0.4% | Oct 10, 2022 | An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject a... |
| CVE-2022-39292 | HIGH | 7.5 | 0.7% | Oct 10, 2022 | Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitiv... |
| CVE-2022-3442 | MEDIUM | 6.1 | 0.5% | Oct 10, 2022 | A vulnerability was found in Crealogix EBICS 7.0. It has been rated as problematic. Affected by this issue is some unkno... |
| CVE-2022-26121 | MEDIUM | 5.3 | 0.7% | Oct 10, 2022 | An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.... |
| CVE-2022-3438 | MEDIUM | 6.1 | 0.5% | Oct 10, 2022 | Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now