2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42756 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of ... |
| CVE-2022-42755 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
| CVE-2022-42754 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In npu driver, there is a memory corruption due to a use after free. This could lead to local denial of service in kerne... |
| CVE-2022-39134 | MEDIUM | 4.7 | 0.1% | Dec 6, 2022 | In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel... |
| CVE-2022-39133 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
| CVE-2022-39132 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial... |
| CVE-2022-39131 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of serv... |
| CVE-2022-39130 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local d... |
| CVE-2022-39129 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local d... |
| CVE-2022-39106 | MEDIUM | 5.5 | 0.1% | Dec 6, 2022 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial... |
| CVE-2022-40603 | MEDIUM | 6.1 | 0.4% | Dec 6, 2022 | A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through ... |
| CVE-2022-46151 | MEDIUM | 6.1 | 0.4% | Dec 6, 2022 | Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field ... |
| CVE-2022-45990 | MEDIUM | 6.1 | 0.5% | Dec 5, 2022 | A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attacker... |
| CVE-2022-45769 | MEDIUM | 6.1 | 0.5% | Dec 5, 2022 | A cross-site scripting (XSS) vulnerability in ClicShopping_V3 v3.402 allows attackers to execute arbitrary web scripts o... |
| CVE-2022-43706 | MEDIUM | 5.4 | 0.4% | Dec 5, 2022 | Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users wit... |
| CVE-2022-43557 | MEDIUM | 5.3 | 0.2% | Dec 5, 2022 | The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, th... |
| CVE-2022-43556 | MEDIUM | 6.1 | 0.6% | Dec 5, 2022 | Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field ... |
| CVE-2022-35260 | MEDIUM | 6.5 | 1.9% | Dec 5, 2022 | curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white sp... |
| CVE-2022-35256 | MEDIUM | 6.5 | 2.6% | Dec 5, 2022 | The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated wit... |
| CVE-2022-23143 | MEDIUM | 6.5 | 0.6% | Dec 5, 2022 | ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an a... |
| CVE-2022-42706 | MEDIUM | 4.9 | 1.1% | Dec 5, 2022 | An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified throu... |
| CVE-2022-42705 | MEDIUM | 6.5 | 1.2% | Dec 5, 2022 | A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remo... |
| CVE-2022-43097 | MEDIUM | 5.4 | 0.5% | Dec 5, 2022 | Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scriptin... |
| CVE-2022-23467 | MEDIUM | 4.6 | 0.4% | Dec 5, 2022 | OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linu... |
| CVE-2022-4293 | MEDIUM | 5.5 | 0.5% | Dec 5, 2022 | Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now