2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-48871 | HIGH | 7.1 | 0.2% | Aug 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-boun... |
| CVE-2022-48870 | MEDIUM | 5.5 | 0.3% | Aug 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: tty: fix possible null-ptr-defer in spk_ttyio_relea... |
| CVE-2022-48869 | MEDIUM | 4.7 | 0.2% | Aug 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: USB: gadgetfs: Fix race between mounting and unmoun... |
| CVE-2022-48868 | MEDIUM | 5.5 | 0.2% | Aug 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Let probe fail when workqueue cann... |
| CVE-2022-48867 | HIGH | 7.8 | 0.2% | Aug 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Prevent use after free on completi... |
| CVE-2022-1206 | HIGH | 7.2 | 1.0% | Aug 20, 2024 | The AdRotate Banner Manager – The only ad manager you'll need plugin for WordPress is vulnerable to arbitrary file uploa... |
| CVE-2022-4425 | — | — | — | Aug 19, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2022-4411 | — | — | — | Aug 19, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2022-4404 | — | — | — | Aug 19, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2022-1443 | — | — | — | Aug 19, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1789. Reason: This candidate is a r... |
| CVE-2022-4532 | MEDIUM | 6.5 | 0.2% | Aug 17, 2024 | The LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, a... |
| CVE-2022-1751 | HIGH | 7.2 | 0.4% | Aug 17, 2024 | The Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and inclu... |
| CVE-2022-4405 | — | — | — | Aug 16, 2024 | Rejected reason: **REJECT** This is not considered a valid security vulnerability. |
| CVE-2022-33162 | CRITICAL | 9.8 | 0.4% | Aug 16, 2024 | IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authenticat... |
| CVE-2022-3399 | MEDIUM | 4.4 | 0.4% | Aug 16, 2024 | The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2022-23817 | HIGH | 7.3 | 0.2% | Aug 13, 2024 | Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious tr... |
| CVE-2022-23815 | HIGH | 8.2 | 0.2% | Aug 13, 2024 | Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB e... |
| CVE-2022-45862 | HIGH | 8.8 | 0.4% | Aug 13, 2024 | An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6... |
| CVE-2022-27486 | HIGH | 7.8 | 0.8% | Aug 13, 2024 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS versi... |
| CVE-2022-38382 | MEDIUM | 4.1 | 0.3% | Aug 13, 2024 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 d... |
| CVE-2022-38322 | — | — | — | Aug 12, 2024 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2022-4003 | MEDIUM | 6.5 | 0.4% | Jul 31, 2024 | A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a special... |
| CVE-2022-4002 | HIGH | 7.2 | 1.0% | Jul 31, 2024 | A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a s... |
| CVE-2022-4001 | HIGH | 7.3 | 0.3% | Jul 31, 2024 | An authentication bypass vulnerability could allow an attacker to access API functions without authentication. |
| CVE-2022-33167 | HIGH | 7.5 | 0.4% | Jul 30, 2024 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacke... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now