2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20350 | MEDIUM | 5.5 | 0.1% | Aug 10, 2022 | In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notific... |
| CVE-2022-20346 | MEDIUM | 6.5 | 0.4% | Aug 10, 2022 | In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incor... |
| CVE-2022-1962 | MEDIUM | 5.5 | 0.9% | Aug 10, 2022 | Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a ... |
| CVE-2022-1705 | MEDIUM | 6.5 | 1.1% | Aug 10, 2022 | Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 al... |
| CVE-2022-34365 | MEDIUM | 6.5 | 0.7% | Aug 10, 2022 | WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability,... |
| CVE-2022-33931 | MEDIUM | 5.3 | 0.4% | Aug 10, 2022 | Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no ... |
| CVE-2022-33929 | MEDIUM | 6.1 | 0.4% | Aug 10, 2022 | Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary pag... |
| CVE-2022-33927 | MEDIUM | 6.5 | 0.4% | Aug 10, 2022 | Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could e... |
| CVE-2022-33926 | MEDIUM | 6.5 | 0.4% | Aug 10, 2022 | Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. A remote malicious user co... |
| CVE-2022-33925 | MEDIUM | 6.5 | 0.7% | Aug 10, 2022 | Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An remote authentica... |
| CVE-2022-33924 | MEDIUM | 5.3 | 0.4% | Aug 10, 2022 | Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with... |
| CVE-2022-29090 | MEDIUM | 6.5 | 0.3% | Aug 10, 2022 | Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious ... |
| CVE-2022-22490 | MEDIUM | 4.9 | 0.7% | Aug 10, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot cr... |
| CVE-2022-22411 | MEDIUM | 6.5 | 0.5% | Aug 10, 2022 | IBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert code which could allow... |
| CVE-2022-20713 | MEDIUM | 6.1 | 1.7% | Aug 10, 2022 | A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco F... |
| CVE-2022-38133 | MEDIUM | 5.3 | 0.4% | Aug 10, 2022 | In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases |
| CVE-2022-2756 | MEDIUM | 6.5 | 2.3% | Aug 10, 2022 | Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1. |
| CVE-2022-36325 | MEDIUM | 4.8 | 0.8% | Aug 10, 2022 | Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow ... |
| CVE-2022-34659 | MEDIUM | 5.3 | 0.6% | Aug 10, 2022 | A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license serv... |
| CVE-2022-20914 | MEDIUM | 4.9 | 0.8% | Aug 10, 2022 | A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow ... |
| CVE-2022-20869 | MEDIUM | 6.1 | 0.5% | Aug 10, 2022 | A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could a... |
| CVE-2022-20852 | MEDIUM | 6.5 | 0.4% | Aug 10, 2022 | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-s... |
| CVE-2022-20820 | MEDIUM | 5.4 | 0.4% | Aug 10, 2022 | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-s... |
| CVE-2022-36801 | MEDIUM | 6.1 | 64.9% | Aug 10, 2022 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or ... |
| CVE-2022-29083 | MEDIUM | 6.8 | 0.4% | Aug 9, 2022 | Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical acc... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now