2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29638 | HIGH | 7.5 | 1.1% | May 18, 2022 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the ... |
| CVE-2022-28958 | — | — | — | May 18, 2022 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2022-28956 | CRITICAL | 9.8 | 22.4% | May 18, 2022 | An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payl... |
| CVE-2022-28955 | HIGH | 7.5 | 38.3% | May 18, 2022 | An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php an... |
| CVE-2022-30976 | HIGH | 7.1 | 0.8% | May 18, 2022 | GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-b... |
| CVE-2022-30975 | MEDIUM | 5.5 | 1.1% | May 18, 2022 | In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp. |
| CVE-2022-30974 | MEDIUM | 5.5 | 1.1% | May 18, 2022 | compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a differe... |
| CVE-2022-29174 | HIGH | 8.1 | 1.3% | May 17, 2022 | countly-server is the server-side part of Countly, a product analytics solution. Prior to versions 22.03.7 and 21.11.4, ... |
| CVE-2022-29162 | HIGH | 7.8 | 0.4% | May 17, 2022 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in r... |
| CVE-2022-28616 | CRITICAL | 9.8 | 1.3% | May 17, 2022 | A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE ha... |
| CVE-2022-1362 | HIGH | 7.3 | 0.7% | May 17, 2022 | The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the... |
| CVE-2022-1361 | HIGH | 7.5 | 0.9% | May 17, 2022 | The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of speci... |
| CVE-2022-1360 | CRITICAL | 9.8 | 1.7% | May 17, 2022 | The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a... |
| CVE-2022-1359 | HIGH | 7.5 | 0.9% | May 17, 2022 | The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to ... |
| CVE-2022-1358 | HIGH | 7.5 | 0.8% | May 17, 2022 | The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in a... |
| CVE-2022-1357 | CRITICAL | 9.8 | 1.6% | May 17, 2022 | The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrar... |
| CVE-2022-1356 | HIGH | 7.8 | 0.3% | May 17, 2022 | cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a us... |
| CVE-2022-30054 | CRITICAL | 9.8 | 1.2% | May 17, 2022 | In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks. |
| CVE-2022-30053 | CRITICAL | 9.8 | 1.2% | May 17, 2022 | In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks. |
| CVE-2022-30052 | CRITICAL | 9.8 | 1.2% | May 17, 2022 | In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks. |
| CVE-2022-30045 | MEDIUM | 6.5 | 0.9% | May 17, 2022 | An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling whi... |
| CVE-2022-29436 | MEDIUM | 6.1 | 0.4% | May 17, 2022 | Persistent Cross-Site Scripting (XSS) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on Wo... |
| CVE-2022-29435 | MEDIUM | 5.4 | 0.4% | May 17, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPr... |
| CVE-2022-28617 | CRITICAL | 9.8 | 1.9% | May 17, 2022 | A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has prov... |
| CVE-2022-28192 | MEDIUM | 4.1 | 0.2% | May 17, 2022 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-f... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now