2022 CVE Vulnerabilities

27,543 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-21510HIGH8.8Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. For supported ve...
CVE-2022-21509MEDIUM5.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af...
CVE-2022-21508MEDIUM5.8Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.3. ...
CVE-2022-21455MEDIUM4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that ...
CVE-2022-21439MEDIUM4.2Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported versions that are affected ...
CVE-2022-21432LOW2.7Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported ...
CVE-2022-21429HIGH8.1Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications ...
CVE-2022-21428MEDIUM6.7Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Inf...
CVE-2022-31150MEDIUM6.5undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request hea...
CVE-2022-31144HIGH8.8Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a spec...
CVE-2022-34540HIGH8.8Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in th...
CVE-2022-34539HIGH8.8Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in th...
CVE-2022-34538HIGH8.8Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in th...
CVE-2022-34537MEDIUM5.4Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a cross-site scripting (XSS) vulnerabil...
CVE-2022-34536HIGH7.5Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session ...
CVE-2022-34535HIGH7.5Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows unauthenticated attackers to view internal paths and scrip...
CVE-2022-34534HIGH7.5Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call.
CVE-2022-34266MEDIUM5.5The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (appl...
CVE-2022-2476MEDIUM5.5A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL =...
CVE-2022-2122HIGH7.8DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_infla...
CVE-2022-1925HIGH7.8DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse elemen...
CVE-2022-1924HIGH7.8DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo...
CVE-2022-1923HIGH7.8DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bz...
CVE-2022-1922HIGH7.8DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gs...
CVE-2022-1921HIGH7.8Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi fi...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now