2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44571 | HIGH | 7.5 | 1.5% | Feb 9, 2023 | There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2... |
| CVE-2022-44570 | HIGH | 7.5 | 1.6% | Feb 9, 2023 | A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can ... |
| CVE-2022-44566 | HIGH | 7.5 | 1.3% | Feb 9, 2023 | A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outsi... |
| CVE-2022-43552 | MEDIUM | 5.9 | 2.7% | Feb 9, 2023 | A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports... |
| CVE-2022-43550 | CRITICAL | 9.8 | 1.8% | Feb 9, 2023 | A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching ... |
| CVE-2022-48302 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerabil... |
| CVE-2022-48301 | HIGH | 7.5 | 0.3% | Feb 9, 2023 | The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability m... |
| CVE-2022-48300 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect... |
| CVE-2022-48299 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect... |
| CVE-2022-48298 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability m... |
| CVE-2022-48297 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of... |
| CVE-2022-48296 | MEDIUM | 5.3 | 0.3% | Feb 9, 2023 | The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users... |
| CVE-2022-48295 | HIGH | 7.5 | 0.3% | Feb 9, 2023 | The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to ... |
| CVE-2022-48294 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may af... |
| CVE-2022-48293 | MEDIUM | 6.5 | 0.2% | Feb 9, 2023 | The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentia... |
| CVE-2022-48292 | MEDIUM | 6.5 | 0.2% | Feb 9, 2023 | The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect ... |
| CVE-2022-48290 | CRITICAL | 9.1 | 0.4% | Feb 9, 2023 | The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may af... |
| CVE-2022-48289 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this v... |
| CVE-2022-48288 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this v... |
| CVE-2022-48287 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data in... |
| CVE-2022-48286 | HIGH | 7.5 | 0.4% | Feb 9, 2023 | The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerab... |
| CVE-2022-30564 | MEDIUM | 5.3 | 0.4% | Feb 9, 2023 | Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a spe... |
| CVE-2022-43440 | HIGH | 7.8 | 0.2% | Feb 9, 2023 | Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29... |
| CVE-2022-47648 | HIGH | 8.8 | 0.4% | Feb 8, 2023 | An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring an... |
| CVE-2022-45982 | CRITICAL | 9.8 | 1.2% | Feb 8, 2023 | thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to e... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now