2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32646 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of pri... |
| CVE-2022-32645 | MEDIUM | 4.1 | 0.1% | Jan 3, 2023 | In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclos... |
| CVE-2022-32644 | MEDIUM | 6.4 | 0.1% | Jan 3, 2023 | In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit... |
| CVE-2022-32641 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation ... |
| CVE-2022-32640 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation... |
| CVE-2022-32639 | MEDIUM | 4.4 | 0.1% | Jan 3, 2023 | In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation o... |
| CVE-2022-32638 | MEDIUM | 6.4 | 0.1% | Jan 3, 2023 | In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg... |
| CVE-2022-32637 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat... |
| CVE-2022-32636 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation o... |
| CVE-2022-32623 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of ... |
| CVE-2022-42471 | MEDIUM | 5.4 | 0.5% | Jan 3, 2023 | An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In Fort... |
| CVE-2022-41336 | MEDIUM | 4.8 | 0.6% | Jan 3, 2023 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thro... |
| CVE-2022-4663 | MEDIUM | 6.1 | 0.7% | Jan 3, 2023 | The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an im... |
| CVE-2022-46309 | MEDIUM | 6.5 | 1.2% | Jan 3, 2023 | Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit... |
| CVE-2022-46305 | MEDIUM | 6.5 | 0.4% | Jan 3, 2023 | ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vul... |
| CVE-2022-3614 | MEDIUM | 6.1 | 0.4% | Jan 3, 2023 | In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypa... |
| CVE-2022-4025 | MEDIUM | 4.3 | 0.5% | Jan 2, 2023 | Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-ori... |
| CVE-2022-3863 | MEDIUM | 6.1 | 0.4% | Jan 2, 2023 | Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially explo... |
| CVE-2022-0801 | MEDIUM | 6.1 | 0.5% | Jan 2, 2023 | Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass X... |
| CVE-2022-0337 | MEDIUM | 6.5 | 1.3% | Jan 2, 2023 | Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attac... |
| CVE-2022-4417 | MEDIUM | 5.3 | 0.7% | Jan 2, 2023 | The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the RES... |
| CVE-2022-4381 | MEDIUM | 5.4 | 0.5% | Jan 2, 2023 | The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could... |
| CVE-2022-4369 | MEDIUM | 6.1 | 0.5% | Jan 2, 2023 | The WP-Lister Lite for Amazon WordPress plugin before 2.4.4 does not sanitize and escapes a parameter before outputting ... |
| CVE-2022-4362 | MEDIUM | 5.4 | 0.6% | Jan 2, 2023 | The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could... |
| CVE-2022-4340 | MEDIUM | 5.3 | 0.7% | Jan 2, 2023 | The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now