2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0396 | MEDIUM | 5.3 | 2.6% | Mar 23, 2022 | BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. S... |
| CVE-2022-1033 | HIGH | 7.8 | 0.9% | Mar 23, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6. |
| CVE-2022-27666 | HIGH | 7.8 | 5.5% | Mar 23, 2022 | A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw... |
| CVE-2022-25518 | MEDIUM | 6.5 | 0.7% | Mar 22, 2022 | In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which allows attackers with d... |
| CVE-2022-26189 | CRITICAL | 9.8 | 3.5% | Mar 22, 2022 | TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType para... |
| CVE-2022-26188 | CRITICAL | 9.8 | 3.5% | Mar 22, 2022 | TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncW... |
| CVE-2022-26187 | CRITICAL | 9.8 | 19.6% | Mar 22, 2022 | TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck fun... |
| CVE-2022-26186 | CRITICAL | 9.8 | 4.0% | Mar 22, 2022 | TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn in... |
| CVE-2022-1031 | HIGH | 7.8 | 1.0% | Mar 22, 2022 | Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6. |
| CVE-2022-26260 | CRITICAL | 9.8 | 1.3% | Mar 22, 2022 | Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse(). |
| CVE-2022-25517 | CRITICAL | 9.8 | 1.8% | Mar 22, 2022 | MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions... |
| CVE-2022-27228 | CRITICAL | 9.8 | 20.3% | Mar 22, 2022 | In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can ex... |
| CVE-2022-25484 | MEDIUM | 5.5 | 0.6% | Mar 22, 2022 | tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. |
| CVE-2022-24774 | HIGH | 8.1 | 1.4% | Mar 22, 2022 | CycloneDX BOM Repository Server is a bill of materials (BOM) repository server for distributing CycloneDX BOMs. CycloneD... |
| CVE-2022-24764 | HIGH | 7.5 | 2.3% | Mar 22, 2022 | PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack b... |
| CVE-2022-21718 | MEDIUM | 5 | 0.9% | Mar 22, 2022 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability ... |
| CVE-2022-1036 | HIGH | 7.5 | 1.2% | Mar 22, 2022 | Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweb... |
| CVE-2022-0667 | HIGH | 7.5 | 1.3% | Mar 22, 2022 | When the vulnerability is triggered the BIND process will exit. BIND 9.18.0 |
| CVE-2022-1034 | HIGH | 7.2 | 1.5% | Mar 22, 2022 | There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.... |
| CVE-2022-0652 | HIGH | 7.8 | 0.2% | Mar 22, 2022 | Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. Th... |
| CVE-2022-0386 | HIGH | 8.8 | 1.2% | Mar 22, 2022 | A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code... |
| CVE-2022-27607 | HIGH | 8.1 | 1.0% | Mar 21, 2022 | Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue than CVE-2018-14531. |
| CVE-2022-26285 | CRITICAL | 9.8 | 2.0% | Mar 21, 2022 | Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the app... |
| CVE-2022-26284 | CRITICAL | 9.8 | 1.9% | Mar 21, 2022 | Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the... |
| CVE-2022-26283 | CRITICAL | 9.8 | 1.5% | Mar 21, 2022 | Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the vie... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now