2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-35290 | HIGH | 7.5 | 0.7% | Aug 10, 2022 | Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be... |
| CVE-2022-32429 | CRITICAL | 9.8 | 75.7% | Aug 10, 2022 | An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technolog... |
| CVE-2022-32245 | HIGH | 8.2 | 0.4% | Aug 10, 2022 | SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attack... |
| CVE-2022-32189 | HIGH | 7.5 | 2.6% | Aug 10, 2022 | A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and ... |
| CVE-2022-32148 | MEDIUM | 6.5 | 1.1% | Aug 10, 2022 | Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputi... |
| CVE-2022-31675 | HIGH | 7.5 | 0.7% | Aug 10, 2022 | VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with netw... |
| CVE-2022-31674 | MEDIUM | 4.3 | 0.5% | Aug 10, 2022 | VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with netwo... |
| CVE-2022-31673 | HIGH | 8.8 | 1.8% | Aug 10, 2022 | VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with netwo... |
| CVE-2022-31672 | HIGH | 7.2 | 0.6% | Aug 10, 2022 | VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network ... |
| CVE-2022-30635 | HIGH | 7.5 | 1.4% | Aug 10, 2022 | Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a p... |
| CVE-2022-30633 | HIGH | 7.5 | 1.6% | Aug 10, 2022 | Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic ... |
| CVE-2022-30632 | HIGH | 7.5 | 1.6% | Aug 10, 2022 | Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due ... |
| CVE-2022-30631 | HIGH | 7.5 | 1.6% | Aug 10, 2022 | Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a pan... |
| CVE-2022-30630 | HIGH | 7.5 | 1.6% | Aug 10, 2022 | Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack... |
| CVE-2022-30629 | LOW | 3.1 | 0.9% | Aug 10, 2022 | Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker ... |
| CVE-2022-30580 | HIGH | 7.8 | 0.6% | Aug 10, 2022 | Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working d... |
| CVE-2022-2719 | MEDIUM | 5.5 | 0.3% | Aug 10, 2022 | In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/oper... |
| CVE-2022-2634 | CRITICAL | 9.8 | 0.8% | Aug 10, 2022 | An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions... |
| CVE-2022-2458 | HIGH | 8.2 | 0.7% | Aug 10, 2022 | XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's process... |
| CVE-2022-2457 | CRITICAL | 9.8 | 0.5% | Aug 10, 2022 | A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against... |
| CVE-2022-29804 | HIGH | 7.5 | 1.9% | Aug 10, 2022 | Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and G... |
| CVE-2022-28881 | HIGH | 7.5 | 0.4% | Aug 10, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certai... |
| CVE-2022-28131 | HIGH | 7.5 | 1.9% | Aug 10, 2022 | Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a pan... |
| CVE-2022-25793 | HIGH | 7.8 | 0.3% | Aug 10, 2022 | A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through ... |
| CVE-2022-23238 | MEDIUM | 6.5 | 0.6% | Aug 10, 2022 | Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now