2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3977 | HIGH | 7.8 | 0.3% | Jan 12, 2023 | A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This i... |
| CVE-2022-3628 | MEDIUM | 6.6 | 0.5% | Jan 12, 2023 | A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user conne... |
| CVE-2022-3145 | MEDIUM | 4.7 | 0.4% | Jan 12, 2023 | An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a ... |
| CVE-2022-43591 | HIGH | 8.8 | 1.1% | Jan 12, 2023 | A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javas... |
| CVE-2022-40983 | HIGH | 8.8 | 1.1% | Jan 12, 2023 | An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted jav... |
| CVE-2022-46372 | HIGH | 8.8 | 0.9% | Jan 12, 2023 | Alotcer - AR7088H-A firmware version 16.10.3 Command execution Improper validation of unspecified input field may allow ... |
| CVE-2022-46371 | MEDIUM | 5.3 | 0.4% | Jan 12, 2023 | Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default admi... |
| CVE-2022-46370 | HIGH | 7.5 | 0.2% | Jan 12, 2023 | Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification... |
| CVE-2022-46369 | MEDIUM | 5.4 | 0.4% | Jan 12, 2023 | Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts i... |
| CVE-2022-46368 | HIGH | 8.8 | 0.3% | Jan 12, 2023 | Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on b... |
| CVE-2022-46367 | HIGH | 8.8 | 0.3% | Jan 12, 2023 | Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege esca... |
| CVE-2022-39187 | MEDIUM | 6.1 | 0.4% | Jan 12, 2023 | Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vector... |
| CVE-2022-39186 | MEDIUM | 5.5 | 0.2% | Jan 12, 2023 | EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions |
| CVE-2022-39185 | CRITICAL | 9.8 | 0.6% | Jan 12, 2023 | EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user... |
| CVE-2022-39184 | CRITICAL | 9.8 | 0.8% | Jan 12, 2023 | EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication... |
| CVE-2022-39183 | MEDIUM | 6.1 | 0.4% | Jan 12, 2023 | Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors. |
| CVE-2022-39182 | HIGH | 8.8 | 0.3% | Jan 12, 2023 | H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege escalation which may all... |
| CVE-2022-46503 | MEDIUM | 5.4 | 0.4% | Jan 12, 2023 | A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0... |
| CVE-2022-3592 | MEDIUM | 6.5 | 2.4% | Jan 12, 2023 | A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' esca... |
| CVE-2022-3515 | CRITICAL | 9.8 | 1.6% | Jan 12, 2023 | A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can... |
| CVE-2022-3437 | MEDIUM | 6.5 | 3.7% | Jan 12, 2023 | A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines ... |
| CVE-2022-3341 | MEDIUM | 5.3 | 0.8% | Jan 12, 2023 | A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c fil... |
| CVE-2022-2155 | HIGH | 7.1 | 0.4% | Jan 12, 2023 | A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access contro... |
| CVE-2022-47927 | MEDIUM | 5.5 | 0.3% | Jan 12, 2023 | An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When ... |
| CVE-2022-24913 | MEDIUM | 5.5 | 0.2% | Jan 12, 2023 | Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now