2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25332 | MEDIUM | 4.1 | 0.1% | Oct 19, 2023 | The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing ... |
| CVE-2022-24404 | HIGH | 7.5 | 0.2% | Oct 19, 2023 | Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this ... |
| CVE-2022-24402 | HIGH | 7.5 | 0.6% | Oct 19, 2023 | The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to o... |
| CVE-2022-24401 | HIGH | 8.1 | 0.3% | Oct 19, 2023 | Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV genera... |
| CVE-2022-24400 | MEDIUM | 5.9 | 0.3% | Oct 19, 2023 | A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set sess... |
| CVE-2022-3761 | MEDIUM | 5.9 | 0.7% | Oct 17, 2023 | OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-mid... |
| CVE-2022-43892 | MEDIUM | 5.3 | 0.3% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could d... |
| CVE-2022-43891 | MEDIUM | 5.3 | 0.5% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a det... |
| CVE-2022-43893 | MEDIUM | 4.4 | 0.4% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IB... |
| CVE-2022-43889 | MEDIUM | 5.3 | 0.5% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could ... |
| CVE-2022-22386 | MEDIUM | 5.9 | 0.5% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by... |
| CVE-2022-22385 | HIGH | 7.5 | 0.4% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmiss... |
| CVE-2022-22380 | MEDIUM | 4.3 | 0.2% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly vali... |
| CVE-2022-22375 | HIGH | 8.8 | 1.2% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a remote authenticated attacker to execute arbitrary command... |
| CVE-2022-22384 | MEDIUM | 4.3 | 0.4% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due ... |
| CVE-2022-22377 | MEDIUM | 5.3 | 0.5% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by ... |
| CVE-2022-48612 | MEDIUM | 6.1 | 0.4% | Oct 16, 2023 | A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attacke... |
| CVE-2022-43868 | MEDIUM | 5.3 | 0.4% | Oct 14, 2023 | IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attack... |
| CVE-2022-43740 | HIGH | 7.5 | 0.8% | Oct 14, 2023 | IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled reso... |
| CVE-2022-33165 | HIGH | 7.5 | 1.2% | Oct 14, 2023 | IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker cou... |
| CVE-2022-33161 | MEDIUM | 5.9 | 0.4% | Oct 14, 2023 | IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure... |
| CVE-2022-32755 | CRITICAL | 9.1 | 0.7% | Oct 14, 2023 | IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML d... |
| CVE-2022-44758 | MEDIUM | 5.3 | 0.3% | Oct 11, 2023 | BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access... |
| CVE-2022-44757 | HIGH | 8.2 | 0.3% | Oct 11, 2023 | BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An att... |
| CVE-2022-42451 | MEDIUM | 4.4 | 0.1% | Oct 11, 2023 | Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now