2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38682 | MEDIUM | 5.5 | 0.1% | Jan 4, 2023 | In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service... |
| CVE-2022-38678 | MEDIUM | 5.5 | 0.1% | Jan 4, 2023 | In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service... |
| CVE-2022-46081 | HIGH | 7.5 | 0.7% | Jan 4, 2023 | In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of pr... |
| CVE-2022-42435 | HIGH | 8.8 | 0.3% | Jan 4, 2023 | IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2... |
| CVE-2022-42710 | MEDIUM | 5.4 | 0.6% | Jan 3, 2023 | Nice (formerly Nortek) Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e ... |
| CVE-2022-38723 | HIGH | 8.6 | 0.8% | Jan 3, 2023 | Gravitee API Management before 3.15.13 allows path traversal through HTML injection. |
| CVE-2022-2967 | HIGH | 7.5 | 0.4% | Jan 3, 2023 | Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not suffi... |
| CVE-2022-44036 | HIGH | 7.2 | 1.1% | Jan 3, 2023 | In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for adm... |
| CVE-2022-38627 | CRITICAL | 9.8 | 4.3% | Jan 3, 2023 | Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered ... |
| CVE-2022-36943 | HIGH | 8.1 | 0.8% | Jan 3, 2023 | SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths... |
| CVE-2022-32665 | CRITICAL | 9.8 | 1.5% | Jan 3, 2023 | In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of ... |
| CVE-2022-32664 | HIGH | 8.8 | 1.2% | Jan 3, 2023 | In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote esc... |
| CVE-2022-32659 | MEDIUM | 6.7 | 0.3% | Jan 3, 2023 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala... |
| CVE-2022-32658 | MEDIUM | 6.7 | 0.3% | Jan 3, 2023 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala... |
| CVE-2022-32657 | MEDIUM | 6.7 | 0.3% | Jan 3, 2023 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala... |
| CVE-2022-32653 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi... |
| CVE-2022-32652 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi... |
| CVE-2022-32651 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi... |
| CVE-2022-32650 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi... |
| CVE-2022-32649 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with ... |
| CVE-2022-32648 | MEDIUM | 6.4 | 0.1% | Jan 3, 2023 | In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi... |
| CVE-2022-32647 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of... |
| CVE-2022-32646 | MEDIUM | 6.7 | 0.1% | Jan 3, 2023 | In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of pri... |
| CVE-2022-32645 | MEDIUM | 4.1 | 0.1% | Jan 3, 2023 | In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclos... |
| CVE-2022-32644 | MEDIUM | 6.4 | 0.1% | Jan 3, 2023 | In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now