2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-47076HIGH7.5An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via Display...
CVE-2022-47075HIGH7.5An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the...
CVE-2022-23240MEDIUM6.5Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a...
CVE-2022-23239MEDIUM4.8Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a...
CVE-2022-41727MEDIUM5.5An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConf...
CVE-2022-41725HIGH7.5A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsi...
CVE-2022-41724HIGH7.5Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records wh...
CVE-2022-41723HIGH7.5A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a de...
CVE-2022-41722HIGH7.5A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transf...
CVE-2022-20551MEDIUM6.7In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic e...
CVE-2022-20481MEDIUM5.5In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead...
CVE-2022-20455MEDIUM5.5In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustio...
CVE-2022-47612MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.5 l...
CVE-2022-47179MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as ...
CVE-2022-43459HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Forms by CaptainForm – Form Builder for WordPress plugin <= 2.5.3 ver...
CVE-2022-4895HIGH8.1Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe comp...
CVE-2022-3884HIGH7.1Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID ...
CVE-2022-46723CRITICAL9.8This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A rem...
CVE-2022-46713MEDIUM4.7A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6....
CVE-2022-46712HIGH7.8A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13. An app ma...
CVE-2022-46705MEDIUM4.3A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is...
CVE-2022-46704MEDIUM5.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11....
CVE-2022-42838LOW3.3An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A ca...
CVE-2022-42833HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may ...
CVE-2022-42826HIGH8.8A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now