2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0934 | HIGH | 7.5 | 1.4% | Aug 29, 2022 | A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a cr... |
| CVE-2022-0852 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the comman... |
| CVE-2022-0851 | MEDIUM | 5.5 | 0.3% | Aug 29, 2022 | There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subseq... |
| CVE-2022-0850 | HIGH | 7.1 | 0.4% | Aug 29, 2022 | A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace. |
| CVE-2022-0812 | MEDIUM | 4.3 | 1.1% | Aug 29, 2022 | An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw... |
| CVE-2022-0718 | MEDIUM | 4.9 | 1.3% | Aug 29, 2022 | A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorr... |
| CVE-2022-0669 | MEDIUM | 6.5 | 0.3% | Aug 29, 2022 | A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancill... |
| CVE-2022-0644 | — | — | — | Aug 29, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-0497 | HIGH | 7.1 | 0.4% | Aug 29, 2022 | A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read dur... |
| CVE-2022-0496 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) propertie... |
| CVE-2022-0485 | MEDIUM | 4.8 | 0.8% | Aug 29, 2022 | A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd c... |
| CVE-2022-0480 | MEDIUM | 5.5 | 0.3% | Aug 29, 2022 | A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exh... |
| CVE-2022-0400 | HIGH | 7.5 | 1.2% | Aug 29, 2022 | An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos. |
| CVE-2022-0367 | HIGH | 7.8 | 0.4% | Aug 29, 2022 | A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. |
| CVE-2022-0358 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly relat... |
| CVE-2022-0336 | HIGH | 8.8 | 1.3% | Aug 29, 2022 | The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not ali... |
| CVE-2022-0284 | HIGH | 7.1 | 0.6% | Aug 29, 2022 | A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulne... |
| CVE-2022-36690 | HIGH | 8.8 | 0.8% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at... |
| CVE-2022-36689 | HIGH | 8.8 | 0.8% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter... |
| CVE-2022-36688 | HIGH | 8.8 | 0.8% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter... |
| CVE-2022-36687 | MEDIUM | 6.5 | 0.9% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the comp... |
| CVE-2022-36686 | HIGH | 8.8 | 0.8% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter... |
| CVE-2022-35020 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_c... |
| CVE-2022-35019 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a segmentation fault. |
| CVE-2022-35018 | MEDIUM | 5.5 | 0.4% | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a segmentation fault. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now