2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47665 | HIGH | 7.8 | 0.3% | Mar 3, 2023 | Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int) |
| CVE-2022-47664 | HIGH | 7.8 | 0.3% | Mar 3, 2023 | Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse |
| CVE-2022-45988 | HIGH | 7.8 | 0.4% | Mar 3, 2023 | starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted fi... |
| CVE-2022-45553 | CRITICAL | 9.8 | 1.5% | Mar 3, 2023 | An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary ... |
| CVE-2022-45552 | HIGH | 7.5 | 0.8% | Mar 3, 2023 | An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to ... |
| CVE-2022-45551 | CRITICAL | 9.8 | 25.1% | Mar 3, 2023 | An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privilege... |
| CVE-2022-40633 | MEDIUM | 4.6 | 0.3% | Mar 2, 2023 | A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks. |
| CVE-2022-46501 | CRITICAL | 9.8 | 0.6% | Mar 2, 2023 | Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the ... |
| CVE-2022-35645 | MEDIUM | 5.4 | 0.5% | Mar 2, 2023 | IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stor... |
| CVE-2022-38734 | HIGH | 7.5 | 0.6% | Mar 2, 2023 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a Denial of Service (DoS) vuln... |
| CVE-2022-4901 | MEDIUM | 6.1 | 0.3% | Mar 1, 2023 | Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the loc... |
| CVE-2022-48310 | MEDIUM | 5.5 | 0.1% | Mar 1, 2023 | An information disclosure vulnerability allows sensitive key material to be included in technical support archives in So... |
| CVE-2022-48309 | MEDIUM | 4.3 | 0.3% | Mar 1, 2023 | A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect version... |
| CVE-2022-3294 | HIGH | 8.8 | 1.6% | Mar 1, 2023 | Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untr... |
| CVE-2022-3162 | MEDIUM | 6.5 | 1.2% | Mar 1, 2023 | Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a dif... |
| CVE-2022-39228 | MEDIUM | 6.5 | 0.6% | Mar 1, 2023 | vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform... |
| CVE-2022-45608 | HIGH | 8.8 | 0.9% | Mar 1, 2023 | An issue was discovered in ThingsBoard 3.4.1, allows low privileged attackers (CUSTOMER_USER) to gain escalated privileg... |
| CVE-2022-36021 | MEDIUM | 5.5 | 59.7% | Mar 1, 2023 | Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` ... |
| CVE-2022-47148 | MEDIUM | 4.3 | 0.2% | Mar 1, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3... |
| CVE-2022-46806 | MEDIUM | 4.3 | 0.2% | Mar 1, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading t... |
| CVE-2022-46805 | MEDIUM | 5.4 | 0.2% | Mar 1, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin ... |
| CVE-2022-46798 | MEDIUM | 5.4 | 0.2% | Mar 1, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings chang... |
| CVE-2022-46797 | MEDIUM | 4.3 | 0.2% | Mar 1, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Conversios All-in-one Google Analytics, Pixels and Product Feed Manag... |
| CVE-2022-45804 | MEDIUM | 5.4 | 0.2% | Mar 1, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <=... |
| CVE-2022-45068 | HIGH | 8.8 | 0.3% | Mar 1, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mercado Pago Mercado Pago payments for WooCommerce plugin <= 6.3.1. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now