2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46149 | MEDIUM | 5.4 | 0.9% | Nov 30, 2022 | Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.... |
| CVE-2022-1911 | MEDIUM | 5.3 | 0.6% | Nov 30, 2022 | Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated ... |
| CVE-2022-1606 | MEDIUM | 4.3 | 0.5% | Nov 30, 2022 | Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to rea... |
| CVE-2022-38803 | MEDIUM | 6.8 | 0.6% | Nov 30, 2022 | Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An ... |
| CVE-2022-38802 | MEDIUM | 6.2 | 0.6% | Nov 30, 2022 | Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual ... |
| CVE-2022-38801 | MEDIUM | 5.4 | 0.3% | Nov 30, 2022 | In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cr... |
| CVE-2022-22984 | MEDIUM | 6.3 | 3.0% | Nov 30, 2022 | The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.... |
| CVE-2022-4233 | MEDIUM | 6.1 | 0.3% | Nov 30, 2022 | A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected b... |
| CVE-2022-4231 | MEDIUM | 5.4 | 0.4% | Nov 30, 2022 | A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue... |
| CVE-2022-3859 | MEDIUM | 6.7 | 0.2% | Nov 30, 2022 | An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This all... |
| CVE-2022-46338 | MEDIUM | 6.5 | 0.7% | Nov 30, 2022 | g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nod... |
| CVE-2022-45869 | MEDIUM | 5.5 | 0.3% | Nov 30, 2022 | A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of... |
| CVE-2022-41413 | MEDIUM | 4.3 | 2.0% | Nov 30, 2022 | perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attack... |
| CVE-2022-4195 | MEDIUM | 4.3 | 0.5% | Nov 30, 2022 | Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to by... |
| CVE-2022-4189 | MEDIUM | 4.3 | 0.4% | Nov 30, 2022 | Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a ... |
| CVE-2022-4188 | MEDIUM | 4.3 | 0.6% | Nov 30, 2022 | Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote a... |
| CVE-2022-4187 | MEDIUM | 6.5 | 0.6% | Nov 30, 2022 | Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker... |
| CVE-2022-4186 | MEDIUM | 4.3 | 0.4% | Nov 30, 2022 | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who ... |
| CVE-2022-4185 | MEDIUM | 4.3 | 0.8% | Nov 30, 2022 | Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to s... |
| CVE-2022-4184 | MEDIUM | 4.3 | 0.6% | Nov 30, 2022 | Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass ... |
| CVE-2022-4183 | MEDIUM | 4.3 | 0.5% | Nov 30, 2022 | Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to by... |
| CVE-2022-4182 | MEDIUM | 4.3 | 0.5% | Nov 30, 2022 | Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypas... |
| CVE-2022-46155 | MEDIUM | 6.4 | 0.4% | Nov 29, 2022 | Airtable.js is the JavaScript client for Airtable. Prior to version 0.11.6, Airtable.js had a misconfigured build script... |
| CVE-2022-4036 | MEDIUM | 5.3 | 0.4% | Nov 29, 2022 | The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.... |
| CVE-2022-4035 | MEDIUM | 6.1 | 0.7% | Nov 29, 2022 | The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field par... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now