2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-34851MEDIUM6.5In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and a...
CVE-2022-34844HIGH7.5In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plan...
CVE-2022-34655HIGH7.5In BIG-IP Versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an iRule containing th...
CVE-2022-34651HIGH7.5In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS ...
CVE-2022-33968MEDIUM4.9In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and a...
CVE-2022-33962MEDIUM6.7In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and a...
CVE-2022-33947MEDIUM6.5In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, a vul...
CVE-2022-33203HIGH7.5In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access poli...
CVE-2022-32455HIGH7.5In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, whe...
CVE-2022-31473HIGH7.7In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attac...
CVE-2022-31119MEDIUM4.9Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions of Nextcloud mail wou...
CVE-2022-30535MEDIUM6.5In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obt...
CVE-2022-31132CRITICAL9.8Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS mi...
CVE-2022-31120LOW2.7Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions whi...
CVE-2022-31118MEDIUM5.3Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find i...
CVE-2022-25168CRITICAL9.8Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An ...
CVE-2022-2656CRITICAL9.8A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affect...
CVE-2022-35216HIGH7.5OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can explo...
CVE-2022-32965CRITICAL9.8OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized ...
CVE-2022-32964CRITICAL9.8OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arb...
CVE-2022-32963HIGH7.5OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploi...
CVE-2022-2653MEDIUM6.5With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ fi...
CVE-2022-2652MEDIUM6Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There i...
CVE-2022-2651CRITICAL9.8Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5.
CVE-2022-2648CRITICAL9.8A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. Thi...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now