2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-30083 | CRITICAL | 9.8 | 1.0% | Jul 30, 2022 | EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user in... |
| CVE-2022-34531 | CRITICAL | 9.8 | 22.5% | Jul 29, 2022 | DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php. |
| CVE-2022-34528 | HIGH | 8.8 | 1.3% | Jul 29, 2022 | D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue. |
| CVE-2022-34527 | HIGH | 8.8 | 4.1% | Jul 29, 2022 | D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte_4C0160... |
| CVE-2022-34526 | MEDIUM | 6.5 | 1.4% | Jul 29, 2022 | A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers ... |
| CVE-2022-34496 | CRITICAL | 9.8 | 0.9% | Jul 29, 2022 | Hiby R3 PRO firmware v1.5 to v1.7 was discovered to contain a file upload vulnerability via the file upload feature. |
| CVE-2022-36447 | HIGH | 7.5 | 0.7% | Jul 29, 2022 | An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted tokens minted on the Chia block... |
| CVE-2022-2324 | HIGH | 7.5 | 0.5% | Jul 29, 2022 | Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture AT... |
| CVE-2022-22280 | CRITICAL | 9.8 | 9.3% | Jul 29, 2022 | Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerabilit... |
| CVE-2022-2323 | HIGH | 8.8 | 1.2% | Jul 29, 2022 | Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remot... |
| CVE-2022-27866 | HIGH | 7.8 | 0.2% | Jul 29, 2022 | A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocate... |
| CVE-2022-27865 | HIGH | 7.8 | 0.2% | Jul 29, 2022 | A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe applicat... |
| CVE-2022-27864 | HIGH | 8.8 | 0.9% | Jul 29, 2022 | A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PD... |
| CVE-2022-36378 | MEDIUM | 4.8 | 0.4% | Jul 29, 2022 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Floating ... |
| CVE-2022-2414 | HIGH | 7.5 | 85.3% | Jul 29, 2022 | Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a... |
| CVE-2022-23004 | MEDIUM | 5.3 | 0.6% | Jul 29, 2022 | When computing a shared secret or point multiplication on the NIST P-256 curve using a public key with an X coordinate o... |
| CVE-2022-23003 | MEDIUM | 5.3 | 0.6% | Jul 29, 2022 | When computing a shared secret or point multiplication on the NIST P-256 curve that results in an X coordinate of zero, ... |
| CVE-2022-23002 | MEDIUM | 5.3 | 0.6% | Jul 29, 2022 | When compressing or decompressing a point on the NIST P-256 elliptic curve with an X coordinate of zero, the resulting o... |
| CVE-2022-23001 | MEDIUM | 5.3 | 0.6% | Jul 29, 2022 | When compressing or decompressing elliptic curve points using the Sweet B library, an incorrect choice of sign bit is us... |
| CVE-2022-35632 | MEDIUM | 4.8 | 0.4% | Jul 29, 2022 | The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plu... |
| CVE-2022-35631 | MEDIUM | 5.5 | 0.2% | Jul 29, 2022 | On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlin... |
| CVE-2022-35630 | MEDIUM | 6.1 | 0.4% | Jul 29, 2022 | A cross-site scripting (XSS) issue in generating a collection report made it possible for malicious clients to inject Ja... |
| CVE-2022-35629 | MEDIUM | 5.4 | 0.4% | Jul 29, 2022 | Due to a bug in the handling of the communication between the client and server, it was possible for one client, already... |
| CVE-2022-33881 | HIGH | 7.8 | 0.4% | Jul 29, 2022 | Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnera... |
| CVE-2022-2579 | MEDIUM | 5.4 | 0.5% | Jul 29, 2022 | A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0. Affected... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now