2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3968 | MEDIUM | 6.1 | 0.4% | Nov 13, 2022 | A vulnerability has been found in emlog and classified as problematic. Affected by this vulnerability is an unknown func... |
| CVE-2022-3963 | MEDIUM | 5.4 | 0.4% | Nov 12, 2022 | A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the fi... |
| CVE-2022-45195 | MEDIUM | 5.3 | 0.6% | Nov 12, 2022 | SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, w... |
| CVE-2022-45194 | MEDIUM | 4.7 | 0.4% | Nov 12, 2022 | CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure. |
| CVE-2022-41905 | MEDIUM | 6.1 | 0.3% | Nov 11, 2022 | WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory brows... |
| CVE-2022-41904 | MEDIUM | 6.5 | 0.4% | Nov 11, 2022 | Element iOS is an iOS Matrix client provided by Element. It is based on MatrixSDK. Prior to version 1.9.7, events encryp... |
| CVE-2022-40750 | MEDIUM | 5.4 | 0.4% | Nov 11, 2022 | IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to ... |
| CVE-2022-36776 | MEDIUM | 5.4 | 0.4% | Nov 11, 2022 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting. This vulnerability allo... |
| CVE-2022-31772 | MEDIUM | 6.5 | 0.7% | Nov 11, 2022 | IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a d... |
| CVE-2022-3959 | MEDIUM | 5.3 | 1.0% | Nov 11, 2022 | A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is so... |
| CVE-2022-3957 | MEDIUM | 6.5 | 0.9% | Nov 11, 2022 | A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_pr... |
| CVE-2022-36367 | MEDIUM | 4.4 | 0.2% | Nov 11, 2022 | Incorrect default permissions in the Intel(R) Support Android application before version v22.02.28 may allow a privilege... |
| CVE-2022-36349 | MEDIUM | 5.5 | 0.2% | Nov 11, 2022 | Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before vers... |
| CVE-2022-35276 | MEDIUM | 6.7 | 0.2% | Nov 11, 2022 | Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow... |
| CVE-2022-34152 | MEDIUM | 6.7 | 0.2% | Nov 11, 2022 | Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may all... |
| CVE-2022-33176 | MEDIUM | 6.7 | 0.2% | Nov 11, 2022 | Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Min... |
| CVE-2022-32569 | MEDIUM | 6.7 | 0.2% | Nov 11, 2022 | Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may all... |
| CVE-2022-30691 | MEDIUM | 5.5 | 0.2% | Nov 11, 2022 | Uncontrolled resource consumption in the Intel(R) Support Android application before version 22.02.28 may allow an authe... |
| CVE-2022-30542 | MEDIUM | 6.7 | 0.2% | Nov 11, 2022 | Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Int... |
| CVE-2022-29515 | MEDIUM | 5.5 | 0.2% | Nov 11, 2022 | Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 ma... |
| CVE-2022-29466 | MEDIUM | 5.5 | 0.2% | Nov 11, 2022 | Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated u... |
| CVE-2022-28667 | MEDIUM | 6.5 | 0.3% | Nov 11, 2022 | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated u... |
| CVE-2022-27499 | MEDIUM | 4.4 | 0.4% | Nov 11, 2022 | Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to p... |
| CVE-2022-26047 | MEDIUM | 6.5 | 0.4% | Nov 11, 2022 | Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products m... |
| CVE-2022-26006 | MEDIUM | 6.7 | 0.2% | Nov 11, 2022 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially e... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now