2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41734 | HIGH | 7.5 | 0.5% | Feb 17, 2023 | IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could allow a remote attacker to obtain sensitive information when a det... |
| CVE-2022-40232 | HIGH | 8.8 | 0.5% | Feb 17, 2023 | IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to ... |
| CVE-2022-20803 | HIGH | 7.5 | 1.1% | Feb 17, 2023 | A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unaut... |
| CVE-2022-43929 | HIGH | 7.5 | 0.7% | Feb 17, 2023 | IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially c... |
| CVE-2022-43927 | HIGH | 7.5 | 0.6% | Feb 17, 2023 | IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privile... |
| CVE-2022-36775 | MEDIUM | 6.5 | 0.4% | Feb 17, 2023 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, c... |
| CVE-2022-47986 | CRITICAL | 9.8 | 100.0% | Feb 17, 2023 | IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system,... |
| CVE-2022-45701 | HIGH | 8.8 | 45.3% | Feb 17, 2023 | Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature. |
| CVE-2022-40032 | CRITICAL | 9.8 | 20.7% | Feb 17, 2023 | SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' paramet... |
| CVE-2022-32972 | HIGH | 7.8 | 0.2% | Feb 17, 2023 | Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation. |
| CVE-2022-40347 | CRITICAL | 9.8 | 5.3% | Feb 17, 2023 | SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType... |
| CVE-2022-47703 | HIGH | 7.5 | 0.8% | Feb 16, 2023 | TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware... |
| CVE-2022-44299 | MEDIUM | 4.9 | 0.8% | Feb 16, 2023 | SiteServerCMS 7.1.3 sscms has a file read vulnerability. |
| CVE-2022-0637 | MEDIUM | 6.1 | 0.4% | Feb 16, 2023 | open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6 |
| CVE-2022-48327 | MEDIUM | 6.1 | 0.6% | Feb 16, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t... |
| CVE-2022-48326 | MEDIUM | 6.1 | 0.6% | Feb 16, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t... |
| CVE-2022-48325 | MEDIUM | 6.1 | 0.6% | Feb 16, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t... |
| CVE-2022-48324 | MEDIUM | 6.1 | 0.6% | Feb 16, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t... |
| CVE-2022-41614 | MEDIUM | 5.5 | 0.2% | Feb 16, 2023 | Insufficiently protected credentials in the Intel(R) ON Event Series Android application before version 2.0 may allow an... |
| CVE-2022-41314 | HIGH | 7.8 | 0.2% | Feb 16, 2023 | Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentia... |
| CVE-2022-38090 | MEDIUM | 4.4 | 0.3% | Feb 16, 2023 | Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may all... |
| CVE-2022-38056 | MEDIUM | 5.3 | 0.1% | Feb 16, 2023 | Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially e... |
| CVE-2022-37340 | HIGH | 7.3 | 0.2% | Feb 16, 2023 | Uncontrolled search path in some Intel(R) QAT drivers for Windows before version 1.6 may allow an authenticated user to ... |
| CVE-2022-36797 | MEDIUM | 5.5 | 0.2% | Feb 16, 2023 | Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 m... |
| CVE-2022-36416 | HIGH | 7.8 | 0.2% | Feb 16, 2023 | Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now