2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47352 | MEDIUM | 4.4 | 0.1% | Sep 4, 2023 | In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial ... |
| CVE-2022-3407 | MEDIUM | 4.3 | 0.2% | Sep 1, 2023 | I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with... |
| CVE-2022-22305 | MEDIUM | 4.2 | 0.5% | Sep 1, 2023 | An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyz... |
| CVE-2022-4343 | MEDIUM | 4.3 | 0.4% | Sep 1, 2023 | An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.1.5, all versions startin... |
| CVE-2022-46527 | HIGH | 7.5 | 0.7% | Sep 1, 2023 | ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser. |
| CVE-2022-44349 | MEDIUM | 5.4 | 0.3% | Sep 1, 2023 | NAVBLUE S.A.S N-Ops & Crew 22.5-rc.50 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-46869 | HIGH | 7.8 | 0.2% | Aug 31, 2023 | Local privilege escalation during installation due to improper soft link handling. The following products are affected: ... |
| CVE-2022-40214 | — | — | — | Aug 31, 2023 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requ... |
| CVE-2022-46868 | HIGH | 7.8 | 0.2% | Aug 31, 2023 | Local privilege escalation during recovery due to improper soft link handling. The following products are affected: Acro... |
| CVE-2022-45451 | HIGH | 7.8 | 0.5% | Aug 31, 2023 | Local privilege escalation due to insecure driver communication port permissions. The following products are affected: A... |
| CVE-2022-1601 | MEDIUM | 5.3 | 0.6% | Aug 30, 2023 | The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over... |
| CVE-2022-46783 | MEDIUM | 5.3 | 0.2% | Aug 28, 2023 | An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may ... |
| CVE-2022-43904 | HIGH | 7.5 | 0.7% | Aug 28, 2023 | IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of e... |
| CVE-2022-43909 | MEDIUM | 5.4 | 0.3% | Aug 27, 2023 | IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav... |
| CVE-2022-43907 | HIGH | 8.8 | 1.0% | Aug 27, 2023 | IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by se... |
| CVE-2022-4452 | HIGH | 8.8 | 0.4% | Aug 25, 2023 | Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially ... |
| CVE-2022-46884 | HIGH | 8.8 | 0.4% | Aug 24, 2023 | A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune tim... |
| CVE-2022-3746 | MEDIUM | 6.7 | 0.2% | Aug 23, 2023 | A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ... |
| CVE-2022-3745 | MEDIUM | 4.4 | 0.2% | Aug 23, 2023 | A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ... |
| CVE-2022-3744 | MEDIUM | 6.7 | 0.2% | Aug 23, 2023 | A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ... |
| CVE-2022-3743 | MEDIUM | 4.4 | 0.2% | Aug 23, 2023 | A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ... |
| CVE-2022-3742 | MEDIUM | 6.7 | 0.2% | Aug 23, 2023 | A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local ... |
| CVE-2022-48571 | HIGH | 7.5 | 0.9% | Aug 22, 2023 | memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. |
| CVE-2022-48570 | HIGH | 7.5 | 0.8% | Aug 22, 2023 | Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanu... |
| CVE-2022-48566 | MEDIUM | 5.9 | 1.1% | Aug 22, 2023 | An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now