2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25737 | HIGH | 7.5 | 0.4% | Apr 13, 2023 | Information disclosure in modem due to missing NULL check while reading packets received from local network |
| CVE-2022-25731 | HIGH | 7.5 | 0.4% | Apr 13, 2023 | Information disclosure in modem due to buffer over-read while processing packets from DNS server |
| CVE-2022-25730 | HIGH | 7.5 | 0.4% | Apr 13, 2023 | Information disclosure in modem due to improper check of IP type while processing DNS server query |
| CVE-2022-25726 | HIGH | 7.5 | 0.4% | Apr 13, 2023 | Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet |
| CVE-2022-25678 | CRITICAL | 9.8 | 0.4% | Apr 13, 2023 | Memory correction in modem due to buffer overwrite during coap connection |
| CVE-2022-4463 | — | — | — | Apr 12, 2023 | Rejected reason: This candidate is unused by its CNA. |
| CVE-2022-3404 | — | — | — | Apr 12, 2023 | Rejected reason: This candidate is unused by its CNA. |
| CVE-2022-47605 | HIGH | 7.2 | 0.7% | Apr 12, 2023 | Auth. SQL Injection') vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.7.0 versions. |
| CVE-2022-47053 | MEDIUM | 5.4 | 0.4% | Apr 12, 2023 | An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 all... |
| CVE-2022-24350 | MEDIUM | 5.5 | 0.2% | Apr 12, 2023 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that t... |
| CVE-2022-48437 | MEDIUM | 5.3 | 0.4% | Apr 12, 2023 | An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verif... |
| CVE-2022-46396 | LOW | 3.3 | 0.2% | Apr 11, 2023 | An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing ope... |
| CVE-2022-43955 | MEDIUM | 6.1 | 0.6% | Apr 11, 2023 | An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.... |
| CVE-2022-43952 | MEDIUM | 5.4 | 0.4% | Apr 11, 2023 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiA... |
| CVE-2022-43951 | HIGH | 7.5 | 0.6% | Apr 11, 2023 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6... |
| CVE-2022-43948 | HIGH | 7.8 | 0.6% | Apr 11, 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb versio... |
| CVE-2022-43947 | HIGH | 8.8 | 0.4% | Apr 11, 2023 | An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0 t... |
| CVE-2022-43946 | HIGH | 8.1 | 0.7% | Apr 11, 2023 | Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and ... |
| CVE-2022-42477 | MEDIUM | 5.5 | 0.2% | Apr 11, 2023 | An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6... |
| CVE-2022-42470 | HIGH | 7.8 | 0.3% | Apr 11, 2023 | A relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 an... |
| CVE-2022-42469 | MEDIUM | 4.3 | 0.4% | Apr 11, 2023 | A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and belo... |
| CVE-2022-41331 | CRITICAL | 9.8 | 1.3% | Apr 11, 2023 | A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before ver... |
| CVE-2022-41330 | MEDIUM | 6.1 | 0.6% | Apr 11, 2023 | An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortin... |
| CVE-2022-40682 | HIGH | 7.8 | 0.2% | Apr 11, 2023 | A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.... |
| CVE-2022-40679 | HIGH | 7.8 | 0.2% | Apr 11, 2023 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now