2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2102 | HIGH | 7.5 | 0.8% | Jun 24, 2022 | Controls limiting uploads to certain file extensions may be bypassed. This could allow an attacker to intercept the init... |
| CVE-2022-28620 | CRITICAL | 9.8 | 1.5% | Jun 24, 2022 | A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; a... |
| CVE-2022-28619 | HIGH | 7.8 | 0.2% | Jun 24, 2022 | A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The v... |
| CVE-2022-23170 | CRITICAL | 9.8 | 0.6% | Jun 24, 2022 | SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environm... |
| CVE-2022-21829 | CRITICAL | 9.8 | 1.7% | Jun 24, 2022 | Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from tho... |
| CVE-2022-1747 | MEDIUM | 4.6 | 0.2% | Jun 24, 2022 | The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting System... |
| CVE-2022-1746 | HIGH | 7.6 | 0.3% | Jun 24, 2022 | The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Syste... |
| CVE-2022-1745 | MEDIUM | 6.8 | 0.3% | Jun 24, 2022 | The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is suscept... |
| CVE-2022-1744 | MEDIUM | 6.8 | 0.3% | Jun 24, 2022 | Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by e... |
| CVE-2022-1743 | MEDIUM | 6.8 | 0.4% | Jun 24, 2022 | The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by special... |
| CVE-2022-1742 | MEDIUM | 6.8 | 0.3% | Jun 24, 2022 | The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an a... |
| CVE-2022-1741 | MEDIUM | 6.8 | 0.3% | Jun 24, 2022 | The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged b... |
| CVE-2022-1740 | MEDIUM | 4.6 | 0.2% | Jun 24, 2022 | The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export... |
| CVE-2022-1739 | MEDIUM | 6.8 | 0.1% | Jun 24, 2022 | The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root cer... |
| CVE-2022-1668 | CRITICAL | 9.8 | 2.0% | Jun 24, 2022 | Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP por... |
| CVE-2022-1667 | HIGH | 7.5 | 1.2% | Jun 24, 2022 | Client-side JavaScript controls may be bypassed by directly running a JS function to reboot the PLC (e.g., from the brow... |
| CVE-2022-1666 | MEDIUM | 6.5 | 0.7% | Jun 24, 2022 | The default password for the web application’s root user (the vendor’s private account) was weak and the MD5 hash was us... |
| CVE-2022-1524 | MEDIUM | 5.9 | 0.3% | Jun 24, 2022 | LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit... |
| CVE-2022-1521 | CRITICAL | 9.1 | 1.0% | Jun 24, 2022 | LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or ... |
| CVE-2022-1519 | CRITICAL | 9.8 | 1.3% | Jun 24, 2022 | LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any ... |
| CVE-2022-1518 | CRITICAL | 9.8 | 1.5% | Jun 24, 2022 | LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directo... |
| CVE-2022-1517 | CRITICAL | 9.8 | 1.6% | Jun 24, 2022 | LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operati... |
| CVE-2022-32990 | MEDIUM | 5.5 | 0.6% | Jun 24, 2022 | An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via ... |
| CVE-2022-32530 | HIGH | 7.8 | 0.4% | Jun 24, 2022 | A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, ... |
| CVE-2022-32143 | HIGH | 8.8 | 1.1% | Jun 24, 2022 | In multiple CODESYS products, file download and upload function allows access to internal files in the working directory... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now