2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32896 | MEDIUM | 5.5 | 0.2% | Feb 27, 2023 | This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. A... |
| CVE-2022-32891 | MEDIUM | 6.1 | 0.7% | Feb 27, 2023 | The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visitin... |
| CVE-2022-32855 | MEDIUM | 5.5 | 0.2% | Feb 27, 2023 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6. A user may ... |
| CVE-2022-32844 | MEDIUM | 6.3 | 0.2% | Feb 27, 2023 | A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and... |
| CVE-2022-32824 | MEDIUM | 5.5 | 0.2% | Feb 27, 2023 | The issue was addressed with improved memory handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadO... |
| CVE-2022-32784 | MEDIUM | 6.5 | 0.5% | Feb 27, 2023 | The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visitin... |
| CVE-2022-22668 | MEDIUM | 5.5 | 0.2% | Feb 27, 2023 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey ... |
| CVE-2022-22582 | MEDIUM | 5.5 | 17.7% | Feb 27, 2023 | A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T... |
| CVE-2022-48305 | MEDIUM | 5.5 | 0.1% | Feb 27, 2023 | There is an identity authentication bypass vulnerability in Huawei Children Smart Watch (Simba-AL00) 1.1.1.274. Successf... |
| CVE-2022-48254 | MEDIUM | 4.6 | 0.2% | Feb 27, 2023 | There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock scre... |
| CVE-2022-4829 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attribu... |
| CVE-2022-4795 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes... |
| CVE-2022-4788 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before output... |
| CVE-2022-4757 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The List Pages Shortcode WordPress plugin before 1.7.6 does not validate and escape some of its shortcode attributes bef... |
| CVE-2022-4679 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The Wufoo Shortcode WordPress plugin before 1.52 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2022-45139 | MEDIUM | 5.3 | 0.3% | Feb 27, 2023 | A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic informa... |
| CVE-2022-45137 | MEDIUM | 6.1 | 0.4% | Feb 27, 2023 | The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that... |
| CVE-2022-34910 | MEDIUM | 5.5 | 0.1% | Feb 27, 2023 | An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store dat... |
| CVE-2022-31405 | MEDIUM | 6.5 | 0.6% | Feb 27, 2023 | MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext. |
| CVE-2022-4203 | MEDIUM | 4.9 | 1.5% | Feb 24, 2023 | A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note... |
| CVE-2022-43923 | MEDIUM | 5.5 | 0.2% | Feb 24, 2023 | IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user... |
| CVE-2022-48345 | MEDIUM | 6.1 | 0.6% | Feb 24, 2023 | sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities. |
| CVE-2022-46440 | MEDIUM | 5.5 | 0.3% | Feb 24, 2023 | ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c. |
| CVE-2022-46785 | MEDIUM | 6.1 | 0.4% | Feb 23, 2023 | SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2). |
| CVE-2022-46784 | MEDIUM | 6.1 | 0.4% | Feb 23, 2023 | SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now