2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34539 | HIGH | 8.8 | 1.2% | Jul 19, 2022 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in th... |
| CVE-2022-34538 | HIGH | 8.8 | 2.7% | Jul 19, 2022 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in th... |
| CVE-2022-34537 | MEDIUM | 5.4 | 0.4% | Jul 19, 2022 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a cross-site scripting (XSS) vulnerabil... |
| CVE-2022-34536 | HIGH | 7.5 | 0.6% | Jul 19, 2022 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session ... |
| CVE-2022-34535 | HIGH | 7.5 | 0.7% | Jul 19, 2022 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows unauthenticated attackers to view internal paths and scrip... |
| CVE-2022-34534 | HIGH | 7.5 | 2.1% | Jul 19, 2022 | Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call. |
| CVE-2022-34266 | MEDIUM | 5.5 | 0.3% | Jul 19, 2022 | The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (appl... |
| CVE-2022-2476 | MEDIUM | 5.5 | 0.4% | Jul 19, 2022 | A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL =... |
| CVE-2022-2122 | HIGH | 7.8 | 0.4% | Jul 19, 2022 | DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_infla... |
| CVE-2022-1925 | HIGH | 7.8 | 0.4% | Jul 19, 2022 | DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse elemen... |
| CVE-2022-1924 | HIGH | 7.8 | 0.4% | Jul 19, 2022 | DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo... |
| CVE-2022-1923 | HIGH | 7.8 | 0.4% | Jul 19, 2022 | DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bz... |
| CVE-2022-1922 | HIGH | 7.8 | 0.4% | Jul 19, 2022 | DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gs... |
| CVE-2022-1921 | HIGH | 7.8 | 0.5% | Jul 19, 2022 | Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi fi... |
| CVE-2022-1920 | HIGH | 7.8 | 0.5% | Jul 19, 2022 | Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite w... |
| CVE-2022-36305 | MEDIUM | 6.1 | 0.4% | Jul 19, 2022 | Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v1... |
| CVE-2022-36304 | MEDIUM | 6.1 | 0.4% | Jul 19, 2022 | Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function a... |
| CVE-2022-36303 | MEDIUM | 6.1 | 0.4% | Jul 19, 2022 | Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function ... |
| CVE-2022-34025 | MEDIUM | 6.1 | 0.4% | Jul 19, 2022 | Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1... |
| CVE-2022-34169 | HIGH | 7.5 | 17.7% | Jul 19, 2022 | The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT styleshee... |
| CVE-2022-34024 | HIGH | 7.2 | 1.1% | Jul 19, 2022 | Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module... |
| CVE-2022-30570 | MEDIUM | 6.5 | 0.6% | Jul 19, 2022 | The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for... |
| CVE-2022-2394 | LOW | 3.5 | 0.4% | Jul 19, 2022 | Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially be... |
| CVE-2022-27373 | HIGH | 8.8 | 2.7% | Jul 19, 2022 | Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command exec... |
| CVE-2022-34023 | CRITICAL | 9.8 | 0.7% | Jul 19, 2022 | Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now