2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-23121CRITICAL9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticati...
CVE-2022-1230LOW3.9This vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 prio...
CVE-2022-1229HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C...
CVE-2022-0650HIGH8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-W...
CVE-2022-0194CRITICAL9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticati...
CVE-2022-3685HIGH7.2 A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minim...
CVE-2022-47529MEDIUM6.7Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Wi...
CVE-2022-3686CRITICAL9.1A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel r...
CVE-2022-3684HIGH7.5A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel r...
CVE-2022-3683HIGH7.5A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successf...
CVE-2022-3682HIGH8.8A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining...
CVE-2022-47170MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (F...
CVE-2022-46863MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions...
CVE-2022-46855MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP Darko Responsive Pricing Table plugin <= 5.1....
CVE-2022-46848MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager ...
CVE-2022-45831MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox ...
CVE-2022-45825MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in iThemes WPComplete plugin <= 2.9.2 versions.
CVE-2022-48361MEDIUM5.3The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerabi...
CVE-2022-48360HIGH7.5The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerabil...
CVE-2022-48359HIGH7.5The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of th...
CVE-2022-48358HIGH7.4The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious ...
CVE-2022-48357HIGH7.5Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of ser...
CVE-2022-48356HIGH7.5The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulne...
CVE-2022-48355MEDIUM6.5The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can caus...
CVE-2022-48354MEDIUM6.5The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cau...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now