2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41978 | MEDIUM | 6.5 | 3.0% | Nov 9, 2022 | Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress. |
| CVE-2022-43321 | MEDIUM | 6.1 | 0.4% | Nov 9, 2022 | Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/... |
| CVE-2022-43320 | MEDIUM | 6.1 | 0.4% | Nov 9, 2022 | FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /... |
| CVE-2022-43144 | MEDIUM | 5.4 | 0.9% | Nov 8, 2022 | A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web s... |
| CVE-2022-30515 | MEDIUM | 5.3 | 0.7% | Nov 8, 2022 | ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them ... |
| CVE-2022-41260 | MEDIUM | 6.1 | 0.4% | Nov 8, 2022 | SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauth... |
| CVE-2022-41259 | MEDIUM | 6.5 | 0.7% | Nov 8, 2022 | SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywh... |
| CVE-2022-41258 | MEDIUM | 6.5 | 0.4% | Nov 8, 2022 | Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to in... |
| CVE-2022-41215 | MEDIUM | 4.7 | 0.4% | Nov 8, 2022 | SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due... |
| CVE-2022-41212 | MEDIUM | 4.9 | 0.8% | Nov 8, 2022 | Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with hi... |
| CVE-2022-41208 | MEDIUM | 5.4 | 0.4% | Nov 8, 2022 | Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with ... |
| CVE-2022-41207 | MEDIUM | 6.1 | 0.4% | Nov 8, 2022 | SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting ... |
| CVE-2022-41205 | MEDIUM | 6.1 | 0.2% | Nov 8, 2022 | SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attack... |
| CVE-2022-3821 | MEDIUM | 5.5 | 0.4% | Nov 8, 2022 | An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supp... |
| CVE-2022-20465 | MEDIUM | 4.6 | 0.9% | Nov 8, 2022 | In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen by... |
| CVE-2022-20457 | MEDIUM | 5.5 | 0.1% | Nov 8, 2022 | In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to imp... |
| CVE-2022-20454 | MEDIUM | 6.7 | 0.1% | Nov 8, 2022 | In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local e... |
| CVE-2022-20453 | MEDIUM | 5.5 | 0.2% | Nov 8, 2022 | In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. ... |
| CVE-2022-20448 | MEDIUM | 5.5 | 0.1% | Nov 8, 2022 | In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a p... |
| CVE-2022-20447 | MEDIUM | 6.5 | 0.3% | Nov 8, 2022 | In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remote... |
| CVE-2022-20426 | MEDIUM | 5.5 | 0.1% | Nov 8, 2022 | In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due... |
| CVE-2022-20414 | MEDIUM | 5.5 | 0.1% | Nov 8, 2022 | In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exce... |
| CVE-2022-32618 | MEDIUM | 6.8 | 0.2% | Nov 8, 2022 | In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to loc... |
| CVE-2022-32617 | MEDIUM | 6.8 | 0.2% | Nov 8, 2022 | In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to loc... |
| CVE-2022-32616 | MEDIUM | 6.7 | 0.1% | Nov 8, 2022 | In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privil... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now