CVEs from 2022
Total
6,002
critical
critical 88
high
high 1,240
medium
medium 887
low
low 23
% Critical
1.5%
% with KEV
2.2%
% with exploit
2.2%
Top products
- jdk 116
- jre 109
- openjdk 100
- zulu 82
- graalvm 74
- cloud_secure_agent 35
- oncommand_insight 34
- cloud_insights_acquisition_unit 34
| CVE | Severity | CVSS | Risk | Published | Description | Impact |
|---|---|---|---|---|---|---|
| CVE-2022-37454 | medium | — | 5.5 | 3y ago | Moderate: php security update | |
| CVE-2022-41862 | medium | — | 5.5 | 3y ago | Moderate: postgresql security update | |
| CVE-2022-2625 | medium | — | 5.5 | 3y ago | Moderate: postgresql security update | |
| CVE-2022-4899 | medium | — | 5.5 | 3y ago | Moderate: mysql security update | |
| CVE-2022-31629 | medium | — | 5.5 | 3y ago | Moderate: php security update | |
| CVE-2022-40897 | medium | — | 5.5 | 3y ago | Moderate: python-setuptools security update | |
| CVE-2022-45061 | medium | — | 5.5 | 3y ago | Moderate: python39:3.9 and python39-devel:3.9 security update | |
| CVE-2022-37436 | medium | — | 5.5 | 3y ago | Moderate: httpd security and bug fix update | |
| CVE-2022-47024 | medium | — | 5.5 | 3y ago | Moderate: vim security update | |
| CVE-2022-31628 | medium | — | 5.5 | 3y ago | Moderate: php security update | |
| CVE-2022-48303 | medium | — | 5.5 | 3y ago | Moderate: tar security update | |
| CVE-2022-31630 | medium | — | 5.5 | 3y ago | Moderate: php security update | |
| CVE-2022-4415 | medium | — | 5.5 | 3y ago | Moderate: systemd security update | |
| CVE-2022-36760 | medium | — | 5.5 | 3y ago | Moderate: httpd security and bug fix update | |
| CVE-2022-45873 | medium | — | 5.5 | 3y ago | Moderate: systemd security update | |
| CVE-2022-31631 | medium | — | 5.5 | 3y ago | Moderate: php security update | |
| CVE-2022-4203 | medium | — | 5.5 | 3y ago | Moderate: openssl security and bug fix update | |
| CVE-2022-2880 | medium | — | 5.5 | 3y ago | Moderate: git-lfs security and bug fix update | |
| CVE-2022-27664 | medium | — | 5.5 | 3y ago | Moderate: git-lfs security and bug fix update | |
| CVE-2022-40303 | medium | — | 5.5 | 3y ago | Moderate: libxml2 security update | |
| CVE-2022-3821 | medium | — | 5.5 | 3y ago | Moderate: systemd security update | |
| CVE-2022-2521 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-31197 | medium | — | 5.5 | 3y ago | PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names | |
| CVE-2022-26306 | medium | — | 5.5 | 3y ago | Moderate: libreoffice security update | |
| CVE-2022-41717 | medium | — | 5.5 | 3y ago | Moderate: container-tools:4.0 security and bug fix update | |
| CVE-2022-2057 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-43680 | medium | — | 5.5 | 3y ago | In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations. | |
| CVE-2022-2953 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-26305 | medium | — | 5.5 | 3y ago | Moderate: libreoffice security update | |
| CVE-2022-2519 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-42012 | medium | — | 5.5 | 3y ago | Moderate: dbus security update | |
| CVE-2022-3140 | medium | — | 5.5 | 3y ago | Moderate: libreoffice security update | |
| CVE-2022-3715 | medium | — | 5.5 | 3y ago | Moderate: bash security update | |
| CVE-2022-41715 | medium | — | 5.5 | 3y ago | Moderate: git-lfs security and bug fix update | |
| CVE-2022-2520 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-2056 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-2879 | medium | — | 5.5 | 3y ago | Moderate: Image Builder security, bug fix, and enhancement update | |
| CVE-2022-32221 | medium | — | 5.5 | 3y ago | Moderate: curl security update | |
| CVE-2022-42010 | medium | — | 5.5 | 3y ago | Moderate: dbus security update | |
| CVE-2022-42011 | medium | — | 5.5 | 3y ago | Moderate: dbus security update | |
| CVE-2022-26307 | medium | — | 5.5 | 3y ago | Moderate: libreoffice security update | |
| CVE-2022-40304 | medium | — | 5.5 | 3y ago | Moderate: libxml2 security update | |
| CVE-2022-2058 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-2868 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-2869 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-2867 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |
| CVE-2022-4144 | medium | — | 5.5 | 3y ago | Moderate: virt:rhel and virt-devel:rhel security and bug fix update | |
| CVE-2022-43548 | medium | — | 5.5 | 4y ago | Moderate: nodejs:16 security, bug fix, and enhancement update | |
| CVE-2022-3517 | medium | — | 5.5 | 4y ago | Moderate: nodejs:16 security, bug fix, and enhancement update | |
| CVE-2022-45442 | medium | — | 5.5 | 4y ago | Moderate: pcs security update | |
| CVE-2022-24999 | medium | — | 5.5 | 4y ago | Moderate: nodejs:14 security, bug fix, and enhancement update | |
| CVE-2022-1354 | medium | — | 5.5 | 4y ago | Moderate: libtiff security update | |
| CVE-2022-1706 | medium | — | 5.5 | 4y ago | Moderate: ignition security, bug fix, and enhancement update | |
| CVE-2022-2319 | medium | — | 5.5 | 4y ago | Moderate: xorg-x11-server security and bug fix update | |
| CVE-2022-0924 | medium | — | 5.5 | 4y ago | Moderate: libtiff security update | |
| CVE-2022-2320 | medium | — | 5.5 | 4y ago | Moderate: xorg-x11-server security and bug fix update | |
| CVE-2022-25309 | medium | — | 5.5 | 4y ago | Moderate: fribidi security update | |
| CVE-2022-1049 | medium | — | 5.5 | 4y ago | Moderate: pcs security, bug fix, and enhancement update | |
| CVE-2022-28693 | medium | — | 5.5 | 4y ago | RHSA-2022:8267: kernel security, bug fix, and enhancement update (Moderate) | |
| CVE-2022-28614 | medium | — | 5.5 | 4y ago | Moderate: httpd security, bug fix, and enhancement update | |
| CVE-2022-31813 | medium | — | 5.5 | 4y ago | Moderate: httpd security, bug fix, and enhancement update | |
| CVE-2022-0561 | medium | — | 5.5 | 4y ago | Moderate: libtiff security update | |
| CVE-2022-48936 | medium | — | 5.5 | 4y ago | Moderate: kernel-rt security update | |
| CVE-2022-30699 | medium | — | 5.5 | 4y ago | Moderate: unbound security, bug fix, and enhancement update | |
| CVE-2022-32990 | medium | — | 5.5 | 4y ago | Moderate: gimp security and enhancement update | |
| CVE-2022-0396 | medium | — | 5.5 | 4y ago | Moderate: bind security update | |
| CVE-2022-49543 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ath11k: fix the warning of dev_wake in mhi_pm_disable_transition() When test device recovery with below command, it has warning i… | |
| CVE-2022-0908 | medium | — | 5.5 | 4y ago | Moderate: libtiff security update | |
| CVE-2022-22719 | medium | — | 5.5 | 4y ago | Moderate: httpd security, bug fix, and enhancement update | |
| CVE-2022-27191 | medium | — | 5.5 | 4y ago | Moderate: buildah security and bug fix update | |
| CVE-2022-2990 | medium | — | 5.5 | 4y ago | Moderate: buildah security and bug fix update | |
| CVE-2022-0562 | medium | — | 5.5 | 4y ago | Moderate: libtiff security update | |
| CVE-2022-49123 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ath11k: Fix frames flush failure caused by deadlock We are seeing below warnings: kernel: [25393.301506] ath11k_pci 0000:01:00.0… | |
| CVE-2022-27404 | medium | — | 5.5 | 4y ago | Moderate: freetype security update | |
| CVE-2022-28615 | medium | — | 5.5 | 4y ago | Moderate: httpd security, bug fix, and enhancement update | |
| CVE-2022-0909 | medium | — | 5.5 | 4y ago | Moderate: libtiff security update | |
| CVE-2022-30522 | medium | — | 5.5 | 4y ago | Moderate: httpd security, bug fix, and enhancement update | |
| CVE-2022-22844 | medium | — | 5.5 | 4y ago | Moderate: libtiff security update | |
| CVE-2022-32189 | medium | — | 5.5 | 4y ago | Moderate: container-tools:4.0 security and bug fix update | |
| CVE-2022-25255 | medium | — | 5.5 | 4y ago | Moderate: qt5 security and bug fix update | |
| CVE-2022-49057 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: block: null_blk: end timed out poll request When poll request is timed out, it is removed from the poll list, but not completed, … | |
| CVE-2022-49060 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() dev_name() was called with dev.parent as argument but without to NULL… | |
| CVE-2022-49066 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part After feeding a decapsulated packet to a veth device with act_mirred, skb_headlen… | |
| CVE-2022-49122 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as it's supplied by a user and use… | |
| CVE-2022-49142 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: net: preserve skb_end_offset() in skb_unclone_keeptruesize() syzbot found another way to trigger the infamous WARN_ON_ONCE(delta … | |
| CVE-2022-49145 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data If the NumEntries field in the _CPC return package is less than 2, … | |
| CVE-2022-49147 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blk_alloc_ext_minor() ida_alloc_range(..., min, max, ...) returns values from min to max, i… | |
| CVE-2022-49227 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: igc: avoid kernel warning when changing RX ring parameters Calling ethtool changing the RX ring parameters like this: $ ethtoo… | |
| CVE-2022-49238 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855 Commit b4a0f54156ac ("ath11k: move peer delete after vd… | |
| CVE-2022-49263 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path This avoids leaking memory if brcmf_chip_get_raminfo fails. … | |
| CVE-2022-49265 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() When a genpd with GENPD_FLAG_IRQ_SAFE gets removed, the follo… | |
| CVE-2022-49270 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: dm: fix use-after-free in dm_cleanup_zoned_dev() dm_cleanup_zoned_dev() uses queue, so it must be called before blk_cleanup_disk(… | |
| CVE-2022-49272 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock syzbot caught a potential deadlock between the PCM runtime->b… | |
| CVE-2022-49334 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: Fix xarray node memory leak If xas_split_alloc() fails to allocate the necessary nodes to complete the xarray ent… | |
| CVE-2022-49340 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ip_gre: test csum_start instead of transport header GRE with TUNNEL_CSUM will apply local checksum offload on CHECKSUM_PARTIAL pa… | |
| CVE-2022-49343 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a direct… | |
| CVE-2022-49347 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in ext4_writepages we got issue as follows: EXT4-fs error (device loop0): ext4_mb_generate_buddy:1141: group 0, … | |
| CVE-2022-49349 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_rename_dir_prepare We got issue as follows: EXT4-fs (loop0): mounted filesystem without journal.… | |
| CVE-2022-49348 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state The EXT4_FC_REPLAY bit in sbi->s_mount_state is used to ind… | |
| CVE-2022-49408 | medium | — | 5.5 | 4y ago | In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in parse_apply_sb_mount_options() If processing the on-disk mount options fails after any memory was alloca… |