2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26461 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege wi... |
| CVE-2022-26460 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of... |
| CVE-2022-26459 | MEDIUM | 4.4 | 0.1% | Sep 6, 2022 | In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosu... |
| CVE-2022-26458 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
| CVE-2022-26457 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
| CVE-2022-26456 | MEDIUM | 4.4 | 0.1% | Sep 6, 2022 | In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local informatio... |
| CVE-2022-26455 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In gz, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of pri... |
| CVE-2022-26454 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privil... |
| CVE-2022-26453 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege... |
| CVE-2022-26451 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit... |
| CVE-2022-26450 | MEDIUM | 6.4 | 0.1% | Sep 6, 2022 | In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege ... |
| CVE-2022-26449 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of... |
| CVE-2022-26448 | MEDIUM | 6.7 | 0.1% | Sep 6, 2022 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of... |
| CVE-2022-25310 | MEDIUM | 5.5 | 0.5% | Sep 6, 2022 | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function o... |
| CVE-2022-25309 | MEDIUM | 5.5 | 0.5% | Sep 6, 2022 | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function... |
| CVE-2022-23691 | MEDIUM | 6.8 | 0.3% | Sep 6, 2022 | A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console... |
| CVE-2022-23690 | MEDIUM | 5.3 | 0.7% | Sep 6, 2022 | A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerp... |
| CVE-2022-23689 | MEDIUM | 4.3 | 0.3% | Sep 6, 2022 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o... |
| CVE-2022-23688 | MEDIUM | 4.3 | 0.3% | Sep 6, 2022 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o... |
| CVE-2022-23687 | MEDIUM | 4.3 | 0.3% | Sep 6, 2022 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o... |
| CVE-2022-23686 | MEDIUM | 4.3 | 0.3% | Sep 6, 2022 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o... |
| CVE-2022-23678 | MEDIUM | 5.9 | 0.8% | Sep 6, 2022 | A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communic... |
| CVE-2022-1628 | MEDIUM | 5.4 | 0.5% | Sep 6, 2022 | The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and ... |
| CVE-2022-26114 | MEDIUM | 6.1 | 0.4% | Sep 6, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before... |
| CVE-2022-34882 | MEDIUM | 6.5 | 0.7% | Sep 6, 2022 | Information Exposure Through an Error Message vulnerability in Hitachi RAID Manager Storage Replication Adapter allows r... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now