2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45101 | CRITICAL | 9.8 | 0.8% | Feb 1, 2023 | Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS.... |
| CVE-2022-45097 | HIGH | 8.8 | 0.4% | Feb 1, 2023 | Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low privileged network att... |
| CVE-2022-45096 | MEDIUM | 6.5 | 0.5% | Feb 1, 2023 | Dell PowerScale OneFS, 8.2.0 through 9.3.0, contain an User Interface Security Issue. An unauthenticated remote user co... |
| CVE-2022-45095 | MEDIUM | 6.7 | 0.6% | Feb 1, 2023 | Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access loca... |
| CVE-2022-34459 | HIGH | 7.8 | 0.1% | Feb 1, 2023 | Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of crypt... |
| CVE-2022-34458 | MEDIUM | 5.5 | 0.2% | Feb 1, 2023 | Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System I... |
| CVE-2022-34443 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | Dell Rugged Control Center, versions prior to 4.5, contain an Improper Input Validation in the Service EndPoint. A Loca... |
| CVE-2022-34400 | HIGH | 7.1 | 0.2% | Feb 1, 2023 | Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially explo... |
| CVE-2022-25916 | HIGH | 7.8 | 1.1% | Feb 1, 2023 | Versions of the package mt7688-wiscan before 0.8.3 are vulnerable to Command Injection due to improper input sanitizatio... |
| CVE-2022-25906 | HIGH | 7.8 | 1.1% | Feb 1, 2023 | All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other chec... |
| CVE-2022-4062 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software function... |
| CVE-2022-42973 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local att... |
| CVE-2022-42972 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege e... |
| CVE-2022-42971 | CRITICAL | 9.8 | 1.1% | Feb 1, 2023 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution w... |
| CVE-2022-42970 | CRITICAL | 9.8 | 0.7% | Feb 1, 2023 | A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionali... |
| CVE-2022-2329 | CRITICAL | 9.8 | 2.1% | Feb 1, 2023 | A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to d... |
| CVE-2022-24324 | CRITICAL | 9.8 | 1.2% | Feb 1, 2023 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo... |
| CVE-2022-4206 | MEDIUM | 6.5 | 0.6% | Feb 1, 2023 | A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102,... |
| CVE-2022-47770 | CRITICAL | 9.8 | 1.0% | Feb 1, 2023 | Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection. |
| CVE-2022-47769 | CRITICAL | 9.8 | 1.2% | Feb 1, 2023 | An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to u... |
| CVE-2022-47768 | HIGH | 7.5 | 1.2% | Feb 1, 2023 | Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal. |
| CVE-2022-31902 | MEDIUM | 5.5 | 0.6% | Feb 1, 2023 | Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add(). |
| CVE-2022-48161 | HIGH | 7.5 | 0.8% | Feb 1, 2023 | Easy Images v2.0 was discovered to contain an arbitrary file download vulnerability via the component /application/down.... |
| CVE-2022-47873 | CRITICAL | 9.8 | 0.8% | Jan 31, 2023 | Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote). |
| CVE-2022-45494 | HIGH | 7.8 | 0.4% | Jan 31, 2023 | Buffer overflow vulnerability in function json_parse_object in sheredom json.h before commit 0825301a07cbf51653882bf2b15... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now