2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-33734 | MEDIUM | 5.5 | 0.2% | Aug 5, 2022 | Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to ... |
| CVE-2022-33730 | MEDIUM | 6.8 | 0.2% | Aug 5, 2022 | Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code exe... |
| CVE-2022-33727 | MEDIUM | 6.1 | 0.1% | Aug 5, 2022 | A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the us... |
| CVE-2022-33723 | MEDIUM | 6.1 | 0.1% | Aug 5, 2022 | A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user... |
| CVE-2022-33721 | MEDIUM | 5.5 | 0.1% | Aug 5, 2022 | A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with ... |
| CVE-2022-33717 | MEDIUM | 4.4 | 0.1% | Aug 5, 2022 | A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read o... |
| CVE-2022-33716 | MEDIUM | 4.4 | 0.1% | Aug 5, 2022 | An absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local attacker to read uninitial... |
| CVE-2022-33715 | MEDIUM | 5.5 | 0.1% | Aug 5, 2022 | Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local... |
| CVE-2022-31663 | MEDIUM | 6.1 | 0.6% | Aug 5, 2022 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vul... |
| CVE-2022-2539 | MEDIUM | 5.3 | 0.6% | Aug 5, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15... |
| CVE-2022-2534 | MEDIUM | 5.3 | 0.5% | Aug 5, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starti... |
| CVE-2022-2531 | MEDIUM | 5.3 | 1.1% | Aug 5, 2022 | An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting... |
| CVE-2022-2512 | MEDIUM | 6.5 | 0.7% | Aug 5, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions start... |
| CVE-2022-2500 | MEDIUM | 5.4 | 0.6% | Aug 5, 2022 | A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.... |
| CVE-2022-2499 | MEDIUM | 4.3 | 0.7% | Aug 5, 2022 | An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions startin... |
| CVE-2022-2497 | MEDIUM | 6.4 | 1.0% | Aug 5, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions start... |
| CVE-2022-2417 | MEDIUM | 4.5 | 0.6% | Aug 5, 2022 | Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.... |
| CVE-2022-2303 | MEDIUM | 4.3 | 0.6% | Aug 5, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befor... |
| CVE-2022-2095 | MEDIUM | 4.3 | 0.7% | Aug 5, 2022 | An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions s... |
| CVE-2022-35936 | MEDIUM | 5.3 | 1.1% | Aug 5, 2022 | Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation... |
| CVE-2022-37431 | MEDIUM | 6.1 | 0.6% | Aug 5, 2022 | A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06. This occurs in the admin porta... |
| CVE-2022-37416 | MEDIUM | 6.5 | 0.8% | Aug 5, 2022 | Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8. |
| CVE-2022-35144 | MEDIUM | 4.8 | 0.7% | Aug 4, 2022 | Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability. |
| CVE-2022-35272 | MEDIUM | 5.5 | 0.4% | Aug 4, 2022 | In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on ... |
| CVE-2022-35241 | MEDIUM | 6.5 | 0.6% | Aug 4, 2022 | In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can ca... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now