2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34520 | MEDIUM | 5.5 | 0.3% | Jul 22, 2022 | Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/b... |
| CVE-2022-34509 | CRITICAL | 9.8 | 1.0% | Jul 22, 2022 | The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party. |
| CVE-2022-34503 | MEDIUM | 6.5 | 0.7% | Jul 22, 2022 | QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerabilit... |
| CVE-2022-34502 | MEDIUM | 5.5 | 0.3% | Jul 22, 2022 | Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm... |
| CVE-2022-34501 | CRITICAL | 9.8 | 1.1% | Jul 22, 2022 | The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party. |
| CVE-2022-34500 | CRITICAL | 9.8 | 1.1% | Jul 22, 2022 | The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party. |
| CVE-2022-34037 | HIGH | 7.5 | 1.0% | Jul 22, 2022 | An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers ... |
| CVE-2022-2470 | MEDIUM | 6.1 | 0.8% | Jul 22, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21. |
| CVE-2022-2143 | CRITICAL | 9.8 | 59.2% | Jul 22, 2022 | The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execut... |
| CVE-2022-2142 | MEDIUM | 5.9 | 0.7% | Jul 22, 2022 | The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attac... |
| CVE-2022-2139 | CRITICAL | 9.8 | 14.8% | Jul 22, 2022 | The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and ... |
| CVE-2022-2138 | HIGH | 7.5 | 10.9% | Jul 22, 2022 | The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitiv... |
| CVE-2022-2137 | MEDIUM | 4.9 | 0.7% | Jul 22, 2022 | The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an ... |
| CVE-2022-2136 | MEDIUM | 6.5 | 9.0% | Jul 22, 2022 | The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow... |
| CVE-2022-2135 | HIGH | 7.5 | 10.1% | Jul 22, 2022 | The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose info... |
| CVE-2022-1655 | MEDIUM | 6.5 | 0.5% | Jul 22, 2022 | An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session... |
| CVE-2022-36131 | MEDIUM | 6.1 | 0.5% | Jul 22, 2022 | The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Tem... |
| CVE-2022-31168 | HIGH | 8.8 | 0.6% | Jul 22, 2022 | Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a membe... |
| CVE-2022-2209 | — | — | — | Jul 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. Al... |
| CVE-2022-2327 | HIGH | 7.8 | 0.3% | Jul 22, 2022 | io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent ... |
| CVE-2022-31172 | HIGH | 7.5 | 0.4% | Jul 22, 2022 | OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the Sig... |
| CVE-2022-31170 | HIGH | 7.5 | 0.6% | Jul 22, 2022 | OpenZeppelin Contracts is a library for smart contract development. Versions 4.0.0 until 4.7.1 are vulnerable to ERC165C... |
| CVE-2022-31169 | HIGH | 7.5 | 0.7% | Jul 22, 2022 | Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 ta... |
| CVE-2022-31164 | HIGH | 7.5 | 0.5% | Jul 22, 2022 | Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log i... |
| CVE-2022-31163 | HIGH | 8.1 | 1.8% | Jul 22, 2022 | TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now