2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-31693 | MEDIUM | 5.5 | 0.2% | Jun 7, 2023 | VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the V... |
| CVE-2022-4950 | HIGH | 8.8 | 1.4% | Jun 7, 2023 | Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that ... |
| CVE-2022-4949 | HIGH | 8.8 | 2.2% | Jun 7, 2023 | The AdSanity plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aj... |
| CVE-2022-4948 | MEDIUM | 4.3 | 0.5% | Jun 7, 2023 | The FlyingPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX... |
| CVE-2022-25834 | HIGH | 7.8 | 0.5% | Jun 7, 2023 | In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could ... |
| CVE-2022-46165 | MEDIUM | 5.4 | 0.8% | Jun 6, 2023 | Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance... |
| CVE-2022-40538 | HIGH | 7.5 | 0.4% | Jun 6, 2023 | Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network. |
| CVE-2022-40536 | HIGH | 7.5 | 0.4% | Jun 6, 2023 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network. |
| CVE-2022-40533 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. |
| CVE-2022-40529 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption due to improper access control in kernel while processing a mapping request from root process. |
| CVE-2022-40525 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis. |
| CVE-2022-40523 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | Information disclosure in Kernel due to indirect branch misprediction. |
| CVE-2022-40522 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption in Linux Networking due to double free while handling a hyp-assign. |
| CVE-2022-40521 | HIGH | 7.5 | 0.4% | Jun 6, 2023 | Transient DOS due to improper authorization in Modem |
| CVE-2022-40507 | HIGH | 7.8 | 1.3% | Jun 6, 2023 | Memory corruption due to double free in Core while mapping HLOS address to the list. |
| CVE-2022-33307 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. |
| CVE-2022-33303 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah ... |
| CVE-2022-33267 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption in Linux while sending DRM request. |
| CVE-2022-33264 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. |
| CVE-2022-33263 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption due to use after free in Core when multiple DCI clients register and deregister. |
| CVE-2022-33251 | HIGH | 7.5 | 0.4% | Jun 6, 2023 | Transient DOS due to reachable assertion in Modem because of invalid network configuration. |
| CVE-2022-33240 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption in Audio due to incorrect type cast during audio use-cases. |
| CVE-2022-33230 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host |
| CVE-2022-33227 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption in Linux android due to double free while calling unregister provider after register call. |
| CVE-2022-33226 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from dia... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now