2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-48643 | MEDIUM | 5.5 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled unde... |
| CVE-2022-48642 | MEDIUM | 5.5 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix percpu memory leak at nf_... |
| CVE-2022-48641 | MEDIUM | 5.5 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is m... |
| CVE-2022-48640 | MEDIUM | 5.5 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix NULL deref in bond_rr_gen_slave_id Fi... |
| CVE-2022-48639 | MEDIUM | 5.5 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tc_new_tf... |
| CVE-2022-48638 | MEDIUM | 5.3 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroup_get_from_id() must check the looked-... |
| CVE-2022-48637 | HIGH | 7.8 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP wor... |
| CVE-2022-48636 | HIGH | 7.8 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasd_alias_get_start_dev due... |
| CVE-2022-48635 | MEDIUM | 6.2 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: fsdax: Fix infinite loop in dax_iomap_rw() I got a... |
| CVE-2022-48634 | MEDIUM | 5.3 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix BUG: sleeping function called from ... |
| CVE-2022-48633 | MEDIUM | 5.5 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix WARN_ON(lock->magic != lock) error ... |
| CVE-2022-48632 | HIGH | 7.8 | 0.3% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smb... |
| CVE-2022-48631 | MEDIUM | 5.5 | 0.2% | Apr 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when eh_entries ==... |
| CVE-2022-48685 | MEDIUM | 6.7 | 0.2% | Apr 27, 2024 | An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file clean_secbi_old_logs is writable by a... |
| CVE-2022-48684 | HIGH | 8.8 | 0.6% | Apr 27, 2024 | An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search templat... |
| CVE-2022-48611 | HIGH | 7.8 | 0.2% | Apr 26, 2024 | A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker ma... |
| CVE-2022-40975 | MEDIUM | 5.4 | 0.5% | Apr 26, 2024 | Missing Authorization vulnerability in Aazztech Post Slider.This issue affects Post Slider: from n/a through 1.6.7. |
| CVE-2022-48682 | MEDIUM | 6 | 0.2% | Apr 26, 2024 | In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. |
| CVE-2022-36029 | MEDIUM | 6.1 | 0.4% | Apr 25, 2024 | Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerabil... |
| CVE-2022-36028 | MEDIUM | 6.1 | 0.4% | Apr 25, 2024 | Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerabil... |
| CVE-2022-45852 | MEDIUM | 6.5 | 0.7% | Apr 24, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in FormAssembly / Drew Busc... |
| CVE-2022-46897 | MEDIUM | 5.3 | 0.1% | Apr 22, 2024 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the re... |
| CVE-2022-35503 | HIGH | 7.5 | 0.5% | Apr 22, 2024 | Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary c... |
| CVE-2022-34562 | MEDIUM | 6.1 | 0.3% | Apr 22, 2024 | A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML vi... |
| CVE-2022-34561 | MEDIUM | 4.3 | 0.4% | Apr 22, 2024 | A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML vi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now