2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-48626 | HIGH | 7.8 | 0.3% | Feb 26, 2024 | In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path... |
| CVE-2022-25377 | HIGH | 7.5 | 0.8% | Feb 22, 2024 | The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary loc... |
| CVE-2022-45177 | HIGH | 7.5 | 0.5% | Feb 21, 2024 | An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under ... |
| CVE-2022-48625 | HIGH | 7.5 | 0.4% | Feb 20, 2024 | Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an... |
| CVE-2022-48624 | HIGH | 7.8 | 1.1% | Feb 19, 2024 | close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. |
| CVE-2022-48621 | HIGH | 7.5 | 0.2% | Feb 18, 2024 | Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulne... |
| CVE-2022-41738 | HIGH | 7.5 | 0.4% | Feb 17, 2024 | IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connectio... |
| CVE-2022-23092 | HIGH | 8.8 | 0.7% | Feb 15, 2024 | The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message co... |
| CVE-2022-23090 | HIGH | 7.7 | 0.2% | Feb 15, 2024 | The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error ca... |
| CVE-2022-23087 | HIGH | 8.8 | 0.2% | Feb 15, 2024 | The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These ... |
| CVE-2022-23086 | HIGH | 7.8 | 0.4% | Feb 15, 2024 | Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified si... |
| CVE-2022-23085 | HIGH | 8.2 | 0.5% | Feb 15, 2024 | A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow. This insufficient bo... |
| CVE-2022-23084 | HIGH | 7.5 | 0.2% | Feb 15, 2024 | The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This... |
| CVE-2022-34309 | HIGH | 7.5 | 0.5% | Feb 12, 2024 | IBM CICS TX Standard and Advanced 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker t... |
| CVE-2022-34310 | HIGH | 7.5 | 0.5% | Feb 12, 2024 | IBM CICS TX Standard and Advanced 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker t... |
| CVE-2022-48622 | HIGH | 7.8 | 0.4% | Jan 26, 2024 | In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory co... |
| CVE-2022-45792 | HIGH | 7.8 | 0.3% | Jan 22, 2024 | Project files may contain malicious contents which the software will use to create files on the filesystem. This allows ... |
| CVE-2022-45845 | HIGH | 8.8 | 0.5% | Jan 19, 2024 | Deserialization of Untrusted Data vulnerability in Nextend Smart Slider 3.This issue affects Smart Slider 3: from n/a th... |
| CVE-2022-45083 | HIGH | 7.2 | 0.6% | Jan 19, 2024 | Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User ... |
| CVE-2022-42884 | HIGH | 8.8 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a th... |
| CVE-2022-41790 | HIGH | 8.8 | 0.5% | Jan 17, 2024 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Fo... |
| CVE-2022-41990 | HIGH | 8.8 | 0.2% | Jan 17, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Ta... |
| CVE-2022-40203 | HIGH | 8.8 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce.This issue affects Advanced Dy... |
| CVE-2022-3899 | HIGH | 8.1 | 0.4% | Jan 16, 2024 | The 3dprint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File M... |
| CVE-2022-3764 | HIGH | 7.2 | 1.0% | Jan 16, 2024 | The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now