2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34389 | MEDIUM | 5.3 | 0.4% | Feb 11, 2023 | Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated atta... |
| CVE-2022-34388 | HIGH | 7.1 | 0.2% | Feb 11, 2023 | Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior... |
| CVE-2022-34387 | HIGH | 7.8 | 0.2% | Feb 11, 2023 | Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and pri... |
| CVE-2022-34386 | MEDIUM | 5.5 | 0.2% | Feb 11, 2023 | Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior)... |
| CVE-2022-34385 | MEDIUM | 5.5 | 0.1% | Feb 11, 2023 | SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) con... |
| CVE-2022-34384 | HIGH | 7.8 | 0.2% | Feb 11, 2023 | Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior),... |
| CVE-2022-44261 | MEDIUM | 6.1 | 0.5% | Feb 10, 2023 | Avery Dennison Monarch Printer M9855 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-34377 | MEDIUM | 6.7 | 0.2% | Feb 10, 2023 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. ... |
| CVE-2022-34376 | MEDIUM | 5.5 | 0.1% | Feb 10, 2023 | Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated... |
| CVE-2022-34366 | MEDIUM | 6.5 | 0.5% | Feb 10, 2023 | Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerabili... |
| CVE-2022-34364 | MEDIUM | 4.4 | 0.2% | Feb 10, 2023 | Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulne... |
| CVE-2022-33934 | MEDIUM | 4.8 | 0.4% | Feb 10, 2023 | Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A rem... |
| CVE-2022-45766 | CRITICAL | 9.1 | 0.8% | Feb 10, 2023 | Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Mana... |
| CVE-2022-46650 | MEDIUM | 4.9 | 12.3% | Feb 10, 2023 | Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACE... |
| CVE-2022-46649 | HIGH | 8.8 | 2.3% | Feb 10, 2023 | Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to e... |
| CVE-2022-4903 | HIGH | 8.1 | 0.6% | Feb 10, 2023 | A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function.... |
| CVE-2022-24410 | MEDIUM | 4.2 | 0.2% | Feb 10, 2023 | Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the... |
| CVE-2022-34454 | MEDIUM | 6.7 | 0.2% | Feb 10, 2023 | Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user cou... |
| CVE-2022-34452 | LOW | 2.7 | 0.4% | Feb 10, 2023 | PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerabil... |
| CVE-2022-43501 | CRITICAL | 9.1 | 0.6% | Feb 10, 2023 | KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insuffic... |
| CVE-2022-45699 | CRITICAL | 9.8 | 76.6% | Feb 10, 2023 | Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attack... |
| CVE-2022-3568 | HIGH | 8.8 | 0.6% | Feb 10, 2023 | The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' param... |
| CVE-2022-21940 | MEDIUM | 6.1 | 0.4% | Feb 9, 2023 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool... |
| CVE-2022-21939 | MEDIUM | 6.1 | 0.5% | Feb 9, 2023 | Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 pr... |
| CVE-2022-44572 | HIGH | 7.5 | 1.6% | Feb 9, 2023 | A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now