2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32222 | MEDIUM | 5.3 | 1.7% | Jul 14, 2022 | A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default pa... |
| CVE-2022-32215 | MEDIUM | 6.5 | 68.8% | Jul 14, 2022 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line T... |
| CVE-2022-32214 | MEDIUM | 6.5 | 77.3% | Jul 14, 2022 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequenc... |
| CVE-2022-32213 | MEDIUM | 6.5 | 35.1% | Jul 14, 2022 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate ... |
| CVE-2022-32212 | HIGH | 8.1 | 5.6% | Jul 14, 2022 | A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAll... |
| CVE-2022-32210 | MEDIUM | 6.5 | 0.4% | Jul 14, 2022 | `Undici.ProxyAgent` never verifies the remote server's certificate, and always exposes all request & response data to th... |
| CVE-2022-2393 | MEDIUM | 5.7 | 0.2% | Jul 14, 2022 | A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-bas... |
| CVE-2022-29593 | MEDIUM | 5.9 | 10.4% | Jul 14, 2022 | relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post reques... |
| CVE-2022-28876 | HIGH | 7.5 | 0.4% | Jul 14, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the... |
| CVE-2022-1662 | MEDIUM | 5.5 | 0.2% | Jul 14, 2022 | In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Ma... |
| CVE-2022-30024 | HIGH | 8.8 | 2.2% | Jul 14, 2022 | A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated... |
| CVE-2022-30113 | CRITICAL | 9.8 | 0.7% | Jul 14, 2022 | Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection. |
| CVE-2022-28377 | HIGH | 7.5 | 0.8% | Jul 14, 2022 | On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC en... |
| CVE-2022-28375 | CRITICAL | 9.8 | 1.8% | Jul 14, 2022 | Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the cr... |
| CVE-2022-28374 | HIGH | 8.8 | 1.8% | Jul 14, 2022 | Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the DM... |
| CVE-2022-28373 | CRITICAL | 9.8 | 1.8% | Jul 14, 2022 | Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize user-controlled parameters within the crt... |
| CVE-2022-28372 | HIGH | 7.5 | 0.7% | Jul 14, 2022 | On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC en... |
| CVE-2022-28371 | HIGH | 7.5 | 0.5% | Jul 14, 2022 | On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC en... |
| CVE-2022-28370 | HIGH | 7.5 | 0.3% | Jul 14, 2022 | On Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade provides a means of pr... |
| CVE-2022-28369 | CRITICAL | 9.8 | 1.3% | Jul 14, 2022 | Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function... |
| CVE-2022-2396 | MEDIUM | 5.4 | 0.5% | Jul 14, 2022 | A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vul... |
| CVE-2022-25803 | MEDIUM | 6.1 | 0.4% | Jul 14, 2022 | Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search. |
| CVE-2022-25802 | MEDIUM | 6.1 | 0.6% | Jul 14, 2022 | Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attac... |
| CVE-2022-25801 | CRITICAL | 9.1 | 0.7% | Jul 14, 2022 | Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools. |
| CVE-2022-25800 | CRITICAL | 9.1 | 0.7% | Jul 14, 2022 | Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now