2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34458 | MEDIUM | 5.5 | 0.2% | Feb 1, 2023 | Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System I... |
| CVE-2022-4206 | MEDIUM | 6.5 | 0.6% | Feb 1, 2023 | A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102,... |
| CVE-2022-31902 | MEDIUM | 5.5 | 0.6% | Feb 1, 2023 | Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add(). |
| CVE-2022-47701 | MEDIUM | 6.1 | 0.4% | Jan 31, 2023 | COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross... |
| CVE-2022-47698 | MEDIUM | 6.1 | 0.4% | Jan 31, 2023 | COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross... |
| CVE-2022-45598 | MEDIUM | 6.1 | 0.5% | Jan 31, 2023 | Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via im... |
| CVE-2022-25147 | MEDIUM | 6.5 | 1.4% | Jan 31, 2023 | Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allow... |
| CVE-2022-45435 | MEDIUM | 6.5 | 0.4% | Jan 31, 2023 | IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, Identity... |
| CVE-2022-44644 | MEDIUM | 6.5 | 1.2% | Jan 31, 2023 | In Apache Linkis <=1.3.0 when used with the MySQL Connector/J in the data source module, an authenticated attacker could... |
| CVE-2022-39061 | MEDIUM | 6.5 | 0.7% | Jan 31, 2023 | ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for... |
| CVE-2022-25979 | MEDIUM | 6.1 | 0.6% | Jan 31, 2023 | Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input san... |
| CVE-2022-4898 | MEDIUM | 5.4 | 0.4% | Jan 31, 2023 | In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in t... |
| CVE-2022-44897 | MEDIUM | 6.1 | 0.8% | Jan 31, 2023 | A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to exe... |
| CVE-2022-40258 | MEDIUM | 5.3 | 0.4% | Jan 31, 2023 | AMI Megarac Weak password hashes for Redfish & API |
| CVE-2022-45897 | MEDIUM | 6.5 | 0.4% | Jan 31, 2023 | On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtai... |
| CVE-2022-32517 | MEDIUM | 6.5 | 0.4% | Jan 30, 2023 | A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to t... |
| CVE-2022-32516 | MEDIUM | 6.5 | 0.2% | Jan 30, 2023 | A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and ... |
| CVE-2022-40137 | MEDIUM | 6.7 | 0.2% | Jan 30, 2023 | A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated priv... |
| CVE-2022-40136 | MEDIUM | 4.4 | 0.2% | Jan 30, 2023 | An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may ... |
| CVE-2022-40135 | MEDIUM | 4.4 | 0.2% | Jan 30, 2023 | An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker wi... |
| CVE-2022-40134 | MEDIUM | 4.4 | 0.2% | Jan 30, 2023 | An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker w... |
| CVE-2022-34888 | MEDIUM | 4.3 | 0.4% | Jan 30, 2023 | The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal service... |
| CVE-2022-34885 | MEDIUM | 6.7 | 0.5% | Jan 30, 2023 | An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permis... |
| CVE-2022-34884 | MEDIUM | 6.5 | 0.6% | Jan 30, 2023 | A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to caus... |
| CVE-2022-4872 | MEDIUM | 4.3 | 0.3% | Jan 30, 2023 | The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ens... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now