2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25966 | HIGH | 7.8 | 0.2% | Aug 18, 2022 | Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenti... |
| CVE-2022-25841 | HIGH | 7.8 | 0.2% | Aug 18, 2022 | Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow an... |
| CVE-2022-23182 | HIGH | 8.8 | 0.4% | Aug 18, 2022 | Improper access control in the Intel(R) Data Center Manager software before version 4.1 may allow an unauthenticated use... |
| CVE-2022-21812 | HIGH | 7.8 | 0.3% | Aug 18, 2022 | Improper access control in the Intel(R) HAXM software before version 7.7.1 may allow an authenticated user to potentiall... |
| CVE-2022-21807 | HIGH | 7.8 | 0.3% | Aug 18, 2022 | Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authe... |
| CVE-2022-21229 | HIGH | 7.8 | 0.2% | Aug 18, 2022 | Improper buffer restrictions for some Intel(R) NUC 9 Extreme Laptop Kit drivers before version 2.2.0.22 may allow an aut... |
| CVE-2022-21225 | HIGH | 8 | 1.5% | Aug 18, 2022 | Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user ... |
| CVE-2022-21197 | HIGH | 7.5 | 0.7% | Aug 18, 2022 | Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potential... |
| CVE-2022-21181 | HIGH | 7.8 | 0.3% | Aug 18, 2022 | Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged use... |
| CVE-2022-21160 | HIGH | 7.5 | 0.7% | Aug 18, 2022 | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potent... |
| CVE-2022-21148 | HIGH | 7.8 | 0.2% | Aug 18, 2022 | Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenti... |
| CVE-2022-21139 | HIGH | 8.8 | 0.2% | Aug 18, 2022 | Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to pote... |
| CVE-2022-37422 | HIGH | 7.5 | 1.1% | Aug 18, 2022 | Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and... |
| CVE-2022-2625 | HIGH | 8 | 1.5% | Aug 18, 2022 | A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one... |
| CVE-2022-37062 | HIGH | 7.5 | 2.6% | Aug 18, 2022 | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability... |
| CVE-2022-37060 | HIGH | 7.5 | 15.2% | Aug 18, 2022 | FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an impro... |
| CVE-2022-37025 | HIGH | 7.8 | 0.2% | Aug 18, 2022 | An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local ... |
| CVE-2022-29549 | HIGH | 7.3 | 0.3% | Aug 18, 2022 | An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first mak... |
| CVE-2022-35198 | HIGH | 7.5 | 0.7% | Aug 18, 2022 | Contract Management System v2.0 contains a weak default password which gives attackers to access database connection inf... |
| CVE-2022-35173 | HIGH | 7.5 | 1.1% | Aug 18, 2022 | An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset dur... |
| CVE-2022-28752 | HIGH | 7.8 | 0.1% | Aug 17, 2022 | Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 are susceptible to a Local Privilege Escalation vulne... |
| CVE-2022-28751 | HIGH | 7.8 | 0.1% | Aug 17, 2022 | The Zoom Client for Meetings for MacOS (Standard and for IT Admin) before version 5.11.3 contains a vulnerability in the... |
| CVE-2022-2547 | HIGH | 7.5 | 1.3% | Aug 17, 2022 | A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integrati... |
| CVE-2022-2337 | HIGH | 7.5 | 1.3% | Aug 17, 2022 | A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Ser... |
| CVE-2022-2335 | HIGH | 7.5 | 1.3% | Aug 17, 2022 | A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integra... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now