2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43969 | CRITICAL | 9.1 | 0.5% | Feb 16, 2023 | Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials. |
| CVE-2022-38731 | MEDIUM | 4.3 | 0.7% | Feb 16, 2023 | Qaelum DOSE 18.08 through 21.1 before 21.2 allows Directory Traversal via the loadimages name parameter. It allows a use... |
| CVE-2022-40016 | HIGH | 7.5 | 0.8% | Feb 15, 2023 | Use After Free (UAF) vulnerability in ireader media-server before commit 3e0f63f1d3553f75c7d4eb32fa7c7a1976a9ff84 in lib... |
| CVE-2022-38935 | HIGH | 8.8 | 0.7% | Feb 15, 2023 | An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/... |
| CVE-2022-38868 | HIGH | 7.2 | 0.9% | Feb 15, 2023 | SQL Injection vulnerability in Ehoney version 2.0.0 in models/protocol.go and models/images.go, allows attackers to exec... |
| CVE-2022-38867 | HIGH | 8.8 | 0.9% | Feb 15, 2023 | SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, 4.0.2, and 4.4.x in api.go, allows attackers to execute arbi... |
| CVE-2022-45546 | HIGH | 7.5 | 0.5% | Feb 15, 2023 | Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacke... |
| CVE-2022-45543 | MEDIUM | 6.1 | 0.5% | Feb 15, 2023 | Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, ti... |
| CVE-2022-42455 | HIGH | 7.8 | 0.2% | Feb 15, 2023 | ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and ... |
| CVE-2022-47508 | HIGH | 7.5 | 0.8% | Feb 15, 2023 | Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but s... |
| CVE-2022-47507 | HIGH | 7.2 | 7.2% | Feb 15, 2023 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversa... |
| CVE-2022-47506 | HIGH | 7.8 | 0.6% | Feb 15, 2023 | SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversar... |
| CVE-2022-47504 | HIGH | 7.2 | 25.1% | Feb 15, 2023 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversa... |
| CVE-2022-47503 | HIGH | 7.2 | 24.4% | Feb 15, 2023 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversa... |
| CVE-2022-38111 | HIGH | 7.2 | 84.8% | Feb 15, 2023 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversa... |
| CVE-2022-45587 | MEDIUM | 5.5 | 0.3% | Feb 15, 2023 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial o... |
| CVE-2022-45586 | MEDIUM | 5.5 | 0.3% | Feb 15, 2023 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a deni... |
| CVE-2022-46892 | CRITICAL | 9.8 | 0.6% | Feb 15, 2023 | In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root... |
| CVE-2022-32477 | HIGH | 7 | 0.1% | Feb 15, 2023 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe shared... |
| CVE-2022-32475 | HIGH | 7 | 0.1% | Feb 15, 2023 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared bu... |
| CVE-2022-32469 | HIGH | 7 | 0.1% | Feb 15, 2023 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used by... |
| CVE-2022-45154 | MEDIUM | 5.5 | 0.2% | Feb 15, 2023 | A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Lin... |
| CVE-2022-45153 | HIGH | 7.8 | 0.2% | Feb 15, 2023 | An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Appli... |
| CVE-2022-42735 | HIGH | 8.8 | 1.2% | Feb 15, 2023 | Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privi... |
| CVE-2022-25978 | MEDIUM | 6.1 | 0.5% | Feb 15, 2023 | All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insuffi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now