2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41091 | MEDIUM | 5.4 | 2.0% | Nov 9, 2022 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2022-41090 | MEDIUM | 5.9 | 1.0% | Nov 9, 2022 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
| CVE-2022-41086 | MEDIUM | 6.4 | 0.3% | Nov 9, 2022 | Windows Group Policy Elevation of Privilege Vulnerability |
| CVE-2022-41066 | MEDIUM | 4.4 | 1.1% | Nov 9, 2022 | Microsoft Dynamics Business Central Information Disclosure Vulnerability |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.7% | Nov 9, 2022 | .NET Framework Information Disclosure Vulnerability |
| CVE-2022-41060 | MEDIUM | 5.5 | 0.7% | Nov 9, 2022 | Microsoft Word Information Disclosure Vulnerability |
| CVE-2022-41055 | MEDIUM | 5.5 | 0.5% | Nov 9, 2022 | Windows Human Interface Device Information Disclosure Vulnerability |
| CVE-2022-41049 | MEDIUM | 5.4 | 2.5% | Nov 9, 2022 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2022-38015 | MEDIUM | 6.5 | 0.6% | Nov 9, 2022 | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2022-44563 | MEDIUM | 5.9 | 0.3% | Nov 9, 2022 | There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect dat... |
| CVE-2022-44560 | MEDIUM | 5.3 | 0.3% | Nov 9, 2022 | The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause lau... |
| CVE-2022-44553 | MEDIUM | 5.3 | 0.3% | Nov 9, 2022 | The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke t... |
| CVE-2022-44548 | MEDIUM | 4.3 | 0.2% | Nov 9, 2022 | There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of thi... |
| CVE-2022-31688 | MEDIUM | 6.1 | 0.4% | Nov 9, 2022 | VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to imprope... |
| CVE-2022-29836 | MEDIUM | 4.3 | 0.3% | Nov 9, 2022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP ... |
| CVE-2022-23824 | MEDIUM | 5.5 | 0.6% | Nov 9, 2022 | IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential in... |
| CVE-2022-3447 | MEDIUM | 4.3 | 0.5% | Nov 9, 2022 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacke... |
| CVE-2022-29481 | MEDIUM | 6.5 | 0.8% | Nov 9, 2022 | A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A ... |
| CVE-2022-26023 | MEDIUM | 6.5 | 0.8% | Nov 9, 2022 | A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A... |
| CVE-2022-0031 | MEDIUM | 6.7 | 0.1% | Nov 9, 2022 | A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu... |
| CVE-2022-43488 | MEDIUM | 4.3 | 0.2% | Nov 9, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress... |
| CVE-2022-43121 | MEDIUM | 6.1 | 0.6% | Nov 9, 2022 | A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers ... |
| CVE-2022-43120 | MEDIUM | 6.1 | 0.5% | Nov 9, 2022 | A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows a... |
| CVE-2022-43119 | MEDIUM | 6.1 | 0.5% | Nov 9, 2022 | A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts o... |
| CVE-2022-43118 | MEDIUM | 6.1 | 0.4% | Nov 9, 2022 | A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or H... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now