2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25722 | MEDIUM | 5.5 | 0.1% | Jan 9, 2023 | Information exposure in DSP services due to improper handling of freeing memory |
| CVE-2022-22470 | MEDIUM | 5.5 | 0.1% | Jan 9, 2023 | IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user. IBM ... |
| CVE-2022-22079 | MEDIUM | 4.6 | 0.2% | Jan 9, 2023 | Denial of service while processing fastboot flash command on mmc due to buffer over read |
| CVE-2022-4881 | MEDIUM | 5.4 | 0.6% | Jan 8, 2023 | A vulnerability was found in CapsAdmin PAC3. It has been rated as problematic. Affected by this issue is some unknown fu... |
| CVE-2022-1102 | MEDIUM | 6.1 | 0.7% | Jan 7, 2023 | A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected ... |
| CVE-2022-45913 | MEDIUM | 6.1 | 0.4% | Jan 6, 2023 | An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execut... |
| CVE-2022-45911 | MEDIUM | 6.1 | 0.4% | Jan 6, 2023 | An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login page by injecting arbit... |
| CVE-2022-47974 | MEDIUM | 6.5 | 0.2% | Jan 6, 2023 | The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerabilit... |
| CVE-2022-39072 | MEDIUM | 5.4 | 0.3% | Jan 6, 2023 | There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input... |
| CVE-2022-4878 | MEDIUM | 5.3 | 0.7% | Jan 6, 2023 | A vulnerability classified as critical has been found in JATOS. Affected is the function ZipUtil of the file modules/com... |
| CVE-2022-45935 | MEDIUM | 5.5 | 0.4% | Jan 6, 2023 | Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to ac... |
| CVE-2022-45787 | MEDIUM | 5.5 | 0.3% | Jan 6, 2023 | Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclo... |
| CVE-2022-44870 | MEDIUM | 6.1 | 0.5% | Jan 6, 2023 | A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary w... |
| CVE-2022-3928 | MEDIUM | 5.5 | 0.2% | Jan 5, 2023 | Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerabili... |
| CVE-2022-47543 | MEDIUM | 5.3 | 0.4% | Jan 5, 2023 | An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects. |
| CVE-2022-23549 | MEDIUM | 6.5 | 0.6% | Jan 5, 2023 | Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta... |
| CVE-2022-23548 | MEDIUM | 6.5 | 0.7% | Jan 5, 2023 | Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta... |
| CVE-2022-23546 | MEDIUM | 5.5 | 0.3% | Jan 5, 2023 | In version 2.9.0.beta14 of Discourse, an open-source discussion platform, maliciously embedded urls can leak an admin's ... |
| CVE-2022-4435 | MEDIUM | 4.4 | 0.2% | Jan 5, 2023 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could all... |
| CVE-2022-4434 | MEDIUM | 4.4 | 0.2% | Jan 5, 2023 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with ele... |
| CVE-2022-4433 | MEDIUM | 4.4 | 0.2% | Jan 5, 2023 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a lo... |
| CVE-2022-4432 | MEDIUM | 4.4 | 0.2% | Jan 5, 2023 | A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a lo... |
| CVE-2022-43573 | MEDIUM | 5.3 | 0.5% | Jan 5, 2023 | IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modi... |
| CVE-2022-41740 | MEDIUM | 4.6 | 0.2% | Jan 5, 2023 | IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtai... |
| CVE-2022-47662 | MEDIUM | 5.5 | 0.3% | Jan 5, 2023 | GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite recursion in Media_GetSample... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now