2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41141 | HIGH | 7.8 | 0.4% | Jan 26, 2023 | This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker mu... |
| CVE-2022-41140 | HIGH | 8.8 | 1.1% | Jan 26, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-L... |
| CVE-2022-40720 | HIGH | 8.8 | 1.0% | Jan 26, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link D... |
| CVE-2022-40719 | HIGH | 8.8 | 0.9% | Jan 26, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link D... |
| CVE-2022-40718 | HIGH | 8.8 | 0.6% | Jan 26, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers... |
| CVE-2022-40717 | HIGH | 8.8 | 0.6% | Jan 26, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers... |
| CVE-2022-3806 | CRITICAL | 9.8 | 1.0% | Jan 25, 2023 | Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer. |
| CVE-2022-4554 | MEDIUM | 5.4 | 0.3% | Jan 24, 2023 | B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an a... |
| CVE-2022-45639 | HIGH | 7.8 | 4.7% | Jan 24, 2023 | OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a cra... |
| CVE-2022-46639 | HIGH | 7.5 | 1.0% | Jan 23, 2023 | A vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows attackers to execute a directo... |
| CVE-2022-40034 | MEDIUM | 5.4 | 0.4% | Jan 23, 2023 | Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via t... |
| CVE-2022-23005 | HIGH | 8.7 | 0.8% | Jan 23, 2023 | Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulner... |
| CVE-2022-4816 | MEDIUM | 5.5 | 0.2% | Jan 23, 2023 | A denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a local user to crash the ap... |
| CVE-2022-3430 | MEDIUM | 6.7 | 0.3% | Jan 23, 2023 | A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with el... |
| CVE-2022-37719 | HIGH | 8.8 | 0.4% | Jan 23, 2023 | A Cross-Site Request Forgery (CSRF) in the management portal of JetNexus/EdgeNexus ADC 4.2.8 allows attackers to escalat... |
| CVE-2022-37718 | HIGH | 8.8 | 3.5% | Jan 23, 2023 | The management portal component of JetNexus/EdgeNexus ADC 4.2.8 was discovered to contain a command injection vulnerabil... |
| CVE-2022-38725 | HIGH | 7.5 | 2.4% | Jan 23, 2023 | An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a ... |
| CVE-2022-4832 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before out... |
| CVE-2022-4790 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode att... |
| CVE-2022-4789 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The WPZOOM Portfolio WordPress plugin before 1.2.2 does not validate and escape one of its shortcode attributes, which c... |
| CVE-2022-4775 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The GeoDirectory WordPress plugin before 2.2.22 does not validate and escape some of its shortcode attributes before out... |
| CVE-2022-4760 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The OneClick Chat to Order WordPress plugin before 1.0.4.2 does not validate and escape some of its shortcode attributes... |
| CVE-2022-4758 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The 10WebMapBuilder WordPress plugin before 1.0.72 does not validate and escape some of its shortcode attributes before ... |
| CVE-2022-4753 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before out... |
| CVE-2022-4751 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Word Balloon WordPress plugin before 4.19.3 does not validate and escape some of its shortcode attributes before out... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now