2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-2570——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:...
CVE-2022-22507——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:...
CVE-2022-44720CRITICAL9.8An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot.
CVE-2022-44719HIGH7.5An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions.
CVE-2022-23264MEDIUM4.7Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2022-46408MEDIUM6.8Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity...
CVE-2022-46407MEDIUM4.8Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” wher...
CVE-2022-26899HIGH8.8Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-29147LOW3.1Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2022-29146HIGH8.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-29144HIGH7.5Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-4143MEDIUM5.3An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4,...
CVE-2022-20443HIGH7.8In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay at...
CVE-2022-44276CRITICAL9.8In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.
CVE-2022-48505MEDIUM5.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to m...
CVE-2022-34352MEDIUM6.5 IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific doma...
CVE-2022-4115MEDIUM5.4The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with role...
CVE-2022-48336CRITICAL9.8Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffe...
CVE-2022-48335CRITICAL9.8Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buff...
CVE-2022-48334CRITICAL9.8Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and...
CVE-2022-48333CRITICAL9.8Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow...
CVE-2022-48332CRITICAL9.8Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant b...
CVE-2022-40010MEDIUM5.4Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vu...
CVE-2022-48331CRITICAL9.8Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultan...
CVE-2022-46718MEDIUM5.5A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventu...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now