2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-28193 | MEDIUM | 5.6 | 0.3% | Apr 27, 2022 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient valida... |
| CVE-2022-24372 | MEDIUM | 4.6 | 0.5% | Apr 27, 2022 | Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of... |
| CVE-2022-22315 | HIGH | 8.8 | 0.7% | Apr 27, 2022 | IBM UrbanCode Deploy (UCD) 7.2.2.1 could allow an authenticated user with special permissions to obtain elevated privile... |
| CVE-2022-23822 | MEDIUM | 6.8 | 0.3% | Apr 27, 2022 | In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassi... |
| CVE-2022-22278 | HIGH | 7.5 | 0.9% | Apr 27, 2022 | A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the so... |
| CVE-2022-22277 | MEDIUM | 5.3 | 0.7% | Apr 27, 2022 | A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext. |
| CVE-2022-22276 | MEDIUM | 5.3 | 0.7% | Apr 27, 2022 | A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user. |
| CVE-2022-22275 | HIGH | 7.5 | 1.0% | Apr 27, 2022 | Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy un... |
| CVE-2022-1507 | MEDIUM | 5.5 | 0.9% | Apr 27, 2022 | chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a deni... |
| CVE-2022-27336 | CRITICAL | 9.8 | 20.0% | Apr 27, 2022 | Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php. |
| CVE-2022-22521 | HIGH | 7.3 | 0.5% | Apr 27, 2022 | In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowi... |
| CVE-2022-22345 | MEDIUM | 4.8 | 1.8% | Apr 27, 2022 | IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J... |
| CVE-2022-22323 | MEDIUM | 6.5 | 1.0% | Apr 27, 2022 | IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable t... |
| CVE-2022-22312 | MEDIUM | 6.5 | 1.0% | Apr 27, 2022 | IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable t... |
| CVE-2022-29505 | HIGH | 7.8 | 0.5% | Apr 27, 2022 | Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that cou... |
| CVE-2022-24889 | MEDIUM | 4.3 | 0.6% | Apr 27, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 21.0.... |
| CVE-2022-24888 | MEDIUM | 4.3 | 1.2% | Apr 27, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 20.0.... |
| CVE-2022-28464 | CRITICAL | 9 | 1.2% | Apr 27, 2022 | Apifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code execution. |
| CVE-2022-27905 | HIGH | 7.2 | 1.0% | Apr 27, 2022 | In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require ... |
| CVE-2022-27239 | HIGH | 7.8 | 0.6% | Apr 27, 2022 | In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could le... |
| CVE-2022-24887 | MEDIUM | 6.1 | 0.9% | Apr 27, 2022 | Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versio... |
| CVE-2022-24886 | LOW | 3.8 | 0.4% | Apr 27, 2022 | Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.1... |
| CVE-2022-24885 | LOW | 2.4 | 0.5% | Apr 27, 2022 | Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1,... |
| CVE-2022-1504 | MEDIUM | 6.1 | 1.0% | Apr 27, 2022 | XSS in /demo/module/?module=HERE in GitHub repository microweber/microweber prior to 1.2.15. Typical impact of XSS attac... |
| CVE-2022-1503 | MEDIUM | 5.4 | 0.6% | Apr 27, 2022 | A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the fil... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now