2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45060 | HIGH | 7.5 | 0.9% | Nov 9, 2022 | An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x bef... |
| CVE-2022-45059 | HIGH | 7.5 | 1.2% | Nov 9, 2022 | An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be perf... |
| CVE-2022-3889 | HIGH | 8.8 | 0.6% | Nov 9, 2022 | Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2022-3888 | HIGH | 8.8 | 0.6% | Nov 9, 2022 | Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit he... |
| CVE-2022-3887 | HIGH | 8.8 | 0.6% | Nov 9, 2022 | Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit ... |
| CVE-2022-3886 | HIGH | 8.8 | 0.6% | Nov 9, 2022 | Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially e... |
| CVE-2022-3885 | HIGH | 8.8 | 0.7% | Nov 9, 2022 | Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2022-39328 | HIGH | 8.1 | 0.9% | Nov 8, 2022 | Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 co... |
| CVE-2022-41214 | HIGH | 8.7 | 0.7% | Nov 8, 2022 | Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with hi... |
| CVE-2022-41211 | HIGH | 7.8 | 0.3% | Nov 8, 2022 | Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D ... |
| CVE-2022-41203 | HIGH | 8.8 | 0.9% | Nov 8, 2022 | In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated atta... |
| CVE-2022-39386 | HIGH | 7.5 | 0.7% | Nov 8, 2022 | @fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a spe... |
| CVE-2022-20462 | HIGH | 7.8 | 0.1% | Nov 8, 2022 | In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. ... |
| CVE-2022-20452 | HIGH | 7.8 | 0.4% | Nov 8, 2022 | In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused ... |
| CVE-2022-20451 | HIGH | 7.8 | 0.1% | Nov 8, 2022 | In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission ch... |
| CVE-2022-20450 | HIGH | 7.8 | 0.1% | Nov 8, 2022 | In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a ... |
| CVE-2022-20445 | HIGH | 7.5 | 0.4% | Nov 8, 2022 | In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validati... |
| CVE-2022-20441 | HIGH | 7.8 | 0.1% | Nov 8, 2022 | In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the... |
| CVE-2022-32601 | HIGH | 7.8 | 0.1% | Nov 8, 2022 | In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation... |
| CVE-2022-26446 | HIGH | 7.5 | 1.1% | Nov 8, 2022 | In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of ... |
| CVE-2022-39377 | HIGH | 7.8 | 1.1% | Nov 8, 2022 | sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and n... |
| CVE-2022-44741 | HIGH | 8.8 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slid... |
| CVE-2022-41136 | HIGH | 8.8 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Short... |
| CVE-2022-38137 | HIGH | 8.8 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify plugin <= 4.2.2 on WordPress. |
| CVE-2022-44556 | HIGH | 7.5 | 0.4% | Nov 8, 2022 | Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availabili... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now