2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-37416 | MEDIUM | 6.5 | 0.8% | Aug 5, 2022 | Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8. |
| CVE-2022-21186 | CRITICAL | 9.8 | 24.9% | Aug 5, 2022 | The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRep... |
| CVE-2022-37415 | HIGH | 7.8 | 0.4% | Aug 5, 2022 | The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008. |
| CVE-2022-37030 | HIGH | 7.8 | 0.3% | Aug 4, 2022 | Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a loc... |
| CVE-2022-35930 | HIGH | 8.8 | 0.5% | Aug 4, 2022 | PolicyController is a utility used to enforce supply chain policy in Kubernetes clusters. In versions prior to 0.2.1 Pol... |
| CVE-2022-31793 | HIGH | 7.5 | 11.4% | Aug 4, 2022 | do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL wi... |
| CVE-2022-35927 | CRITICAL | 9.8 | 1.6% | Aug 4, 2022 | Contiki-NG is an open-source, cross-platform operating system for IoT devices. In the RPL-Classic routing protocol imple... |
| CVE-2022-35926 | HIGH | 7.5 | 0.9% | Aug 4, 2022 | Contiki-NG is an open-source, cross-platform operating system for IoT devices. Because of insufficient validation of IPv... |
| CVE-2022-35858 | HIGH | 7.8 | 0.4% | Aug 4, 2022 | The TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a trusted application to tr... |
| CVE-2022-35144 | MEDIUM | 4.8 | 0.7% | Aug 4, 2022 | Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability. |
| CVE-2022-35143 | CRITICAL | 9.8 | 1.3% | Aug 4, 2022 | Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force... |
| CVE-2022-35142 | HIGH | 7.5 | 1.2% | Aug 4, 2022 | An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the S... |
| CVE-2022-35929 | CRITICAL | 9.8 | 0.5% | Aug 4, 2022 | cosign is a container signing and verification utility. In versions prior to 1.10.1 cosign can report a false positive i... |
| CVE-2022-34993 | CRITICAL | 9.8 | 0.9% | Aug 4, 2022 | Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample. |
| CVE-2022-34970 | CRITICAL | 9.8 | 2.8% | Aug 4, 2022 | Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitati... |
| CVE-2022-35735 | HIGH | 7.2 | 0.8% | Aug 4, 2022 | In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, a... |
| CVE-2022-35728 | CRITICAL | 9.8 | 0.6% | Aug 4, 2022 | In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and a... |
| CVE-2022-35272 | MEDIUM | 5.5 | 0.4% | Aug 4, 2022 | In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on ... |
| CVE-2022-35245 | HIGH | 7.5 | 0.7% | Aug 4, 2022 | In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access ... |
| CVE-2022-35243 | CRITICAL | 9.1 | 0.6% | Aug 4, 2022 | In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when ... |
| CVE-2022-35241 | MEDIUM | 6.5 | 0.6% | Aug 4, 2022 | In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can ca... |
| CVE-2022-35240 | HIGH | 7.5 | 0.7% | Aug 4, 2022 | In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when the Message Routing (M... |
| CVE-2022-35236 | HIGH | 7.5 | 0.7% | Aug 4, 2022 | In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is co... |
| CVE-2022-34865 | CRITICAL | 9.1 | 0.4% | Aug 4, 2022 | In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds,... |
| CVE-2022-34862 | HIGH | 7.5 | 1.1% | Aug 4, 2022 | In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, whe... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now