2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20482 | MEDIUM | 5.5 | 0.2% | Dec 13, 2022 | In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and requir... |
| CVE-2022-20476 | MEDIUM | 5.5 | 0.2% | Dec 13, 2022 | In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due ... |
| CVE-2022-20471 | MEDIUM | 5.5 | 0.1% | Dec 13, 2022 | In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. T... |
| CVE-2022-20468 | MEDIUM | 6.5 | 0.1% | Dec 13, 2022 | In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could ... |
| CVE-2022-20466 | MEDIUM | 5.5 | 0.1% | Dec 13, 2022 | In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's passw... |
| CVE-2022-20449 | MEDIUM | 4.4 | 0.1% | Dec 13, 2022 | In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a pa... |
| CVE-2022-46059 | MEDIUM | 6.5 | 0.3% | Dec 13, 2022 | AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF). |
| CVE-2022-44636 | MEDIUM | 4.6 | 0.2% | Dec 13, 2022 | The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spo... |
| CVE-2022-44303 | MEDIUM | 6.1 | 0.6% | Dec 13, 2022 | Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript c... |
| CVE-2022-46061 | MEDIUM | 6.1 | 0.5% | Dec 13, 2022 | AeroCMS v0.0.1 is vulnerable to ClickJacking. |
| CVE-2022-46058 | MEDIUM | 4.8 | 0.5% | Dec 13, 2022 | AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability... |
| CVE-2022-46047 | MEDIUM | 4.9 | 0.8% | Dec 13, 2022 | AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter. |
| CVE-2022-38124 | MEDIUM | 6.5 | 0.5% | Dec 13, 2022 | Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner. |
| CVE-2022-4444 | MEDIUM | 6.1 | 0.5% | Dec 13, 2022 | A vulnerability was found in ipti br.tag. It has been declared as problematic. Affected by this vulnerability is an unkn... |
| CVE-2022-23523 | MEDIUM | 5.5 | 0.2% | Dec 13, 2022 | In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine t... |
| CVE-2022-46160 | MEDIUM | 4.3 | 0.5% | Dec 13, 2022 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14... |
| CVE-2022-41915 | MEDIUM | 6.5 | 0.9% | Dec 13, 2022 | Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior ... |
| CVE-2022-23473 | MEDIUM | 4.3 | 0.5% | Dec 13, 2022 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14... |
| CVE-2022-41275 | MEDIUM | 6.1 | 0.5% | Dec 13, 2022 | In SAP Solution Manager (Enterprise Search) - versions 740, and 750, an unauthenticated attacker can generate a link tha... |
| CVE-2022-41274 | MEDIUM | 6.5 | 0.6% | Dec 13, 2022 | SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application ... |
| CVE-2022-41273 | MEDIUM | 6.1 | 0.5% | Dec 13, 2022 | Due to improper input sanitization in SAP Sourcing and SAP Contract Lifecycle Management - version 1100, an attacker can... |
| CVE-2022-41266 | MEDIUM | 6.1 | 0.4% | Dec 13, 2022 | Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions 1905, 2005, 2105, 2011, 2... |
| CVE-2022-41263 | MEDIUM | 4.3 | 0.2% | Dec 12, 2022 | Due to a missing authentication check, SAP Business Objects Business Intelligence Platform (Web Intelligence) - versions... |
| CVE-2022-41262 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, allows an unauthenti... |
| CVE-2022-41261 | MEDIUM | 5.5 | 0.2% | Dec 12, 2022 | SAP Solution Manager (Diagnostic Agent) - version 7.20, allows an authenticated attacker on Windows system to access a f... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now