2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39822 | HIGH | 8.8 | 0.6% | Dec 25, 2023 | In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the... |
| CVE-2022-39818 | HIGH | 8.8 | 2.2% | Dec 25, 2023 | In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via ... |
| CVE-2022-39337 | HIGH | 7.5 | 1.1% | Dec 22, 2023 | Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-li... |
| CVE-2022-47599 | HIGH | 7.2 | 0.5% | Dec 20, 2023 | Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source ... |
| CVE-2022-47597 | HIGH | 7.5 | 0.6% | Dec 20, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Popup Maker Popup Maker – Popup for opt-ins,... |
| CVE-2022-43843 | HIGH | 7.5 | 0.4% | Dec 14, 2023 | IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attack... |
| CVE-2022-22942 | HIGH | 7.8 | 2.6% | Dec 13, 2023 | The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to f... |
| CVE-2022-27488 | HIGH | 8.8 | 0.5% | Dec 13, 2023 | A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 thr... |
| CVE-2022-47375 | HIGH | 7.5 | 0.7% | Dec 12, 2023 | A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versi... |
| CVE-2022-47374 | HIGH | 7.5 | 0.7% | Dec 12, 2023 | A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versi... |
| CVE-2022-48616 | HIGH | 7.5 | 1.2% | Dec 12, 2023 | A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability... |
| CVE-2022-48615 | HIGH | 7.1 | 0.3% | Dec 12, 2023 | An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to... |
| CVE-2022-47531 | HIGH | 8.8 | 1.0% | Dec 5, 2023 | An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows au... |
| CVE-2022-46480 | HIGH | 8.1 | 0.5% | Dec 5, 2023 | Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firm... |
| CVE-2022-42539 | HIGH | 7.5 | 0.3% | Nov 29, 2023 | Information disclosure |
| CVE-2022-41678 | HIGH | 8.8 | 85.8% | Nov 28, 2023 | Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ... |
| CVE-2022-44010 | HIGH | 7.5 | 1.0% | Nov 23, 2023 | An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endp... |
| CVE-2022-35638 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-... |
| CVE-2022-45781 | HIGH | 8.8 | 0.7% | Nov 14, 2023 | Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /gofo... |
| CVE-2022-45469 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalatio... |
| CVE-2022-41700 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may ... |
| CVE-2022-41689 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Improper access control in some Intel In-Band Manageability software before version 3.0.14 may allow an authenticated us... |
| CVE-2022-40681 | HIGH | 7.1 | 0.2% | Nov 14, 2023 | A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.... |
| CVE-2022-38786 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authentica... |
| CVE-2022-33898 | HIGH | 7.8 | 0.2% | Nov 14, 2023 | Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may all... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now