2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-30749 | HIGH | 7.8 | 0.2% | Jun 7, 2022 | Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart d... |
| CVE-2022-30746 | HIGH | 7.5 | 0.8% | Jun 7, 2022 | Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely ... |
| CVE-2022-30744 | HIGH | 7.8 | 0.2% | Jun 7, 2022 | DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows attacker to execute arb... |
| CVE-2022-30735 | HIGH | 7.5 | 0.4% | Jun 7, 2022 | Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_tok... |
| CVE-2022-30732 | HIGH | 7.5 | 0.6% | Jun 7, 2022 | Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access ... |
| CVE-2022-30726 | HIGH | 7.8 | 0.1% | Jun 7, 2022 | Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1... |
| CVE-2022-30717 | HIGH | 7.5 | 0.2% | Jun 7, 2022 | Improper caller check in AR Emoji prior to SMR Jun-2022 Release 1 allows untrusted applications to use some camera funct... |
| CVE-2022-1708 | HIGH | 7.5 | 2.8% | Jun 7, 2022 | A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the... |
| CVE-2022-31028 | HIGH | 7.5 | 2.8% | Jun 7, 2022 | MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with versi... |
| CVE-2022-29564 | HIGH | 7.5 | 0.9% | Jun 7, 2022 | Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in ... |
| CVE-2022-27438 | HIGH | 8.1 | 2.4% | Jun 6, 2022 | Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced... |
| CVE-2022-30469 | HIGH | 8.8 | 1.4% | Jun 6, 2022 | In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman§ion=get&page... |
| CVE-2022-29631 | HIGH | 7.5 | 0.9% | Jun 6, 2022 | Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequ... |
| CVE-2022-30587 | HIGH | 7.5 | 0.8% | Jun 6, 2022 | Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure. |
| CVE-2022-32275 | HIGH | 7.5 | 8.5% | Jun 6, 2022 | Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /..... |
| CVE-2022-30586 | HIGH | 7.2 | 1.2% | Jun 6, 2022 | Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution. |
| CVE-2022-22396 | HIGH | 7.5 | 0.7% | Jun 6, 2022 | Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certa... |
| CVE-2022-23712 | HIGH | 7.5 | 7.4% | Jun 6, 2022 | A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could fo... |
| CVE-2022-21757 | HIGH | 7.5 | 0.5% | Jun 6, 2022 | In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of ser... |
| CVE-2022-21745 | HIGH | 8.8 | 0.4% | Jun 6, 2022 | In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of... |
| CVE-2022-1680 | HIGH | 8.8 | 15.5% | Jun 6, 2022 | An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all... |
| CVE-2022-31486 | HIGH | 8.8 | 1.2% | Jun 6, 2022 | An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell co... |
| CVE-2022-31484 | HIGH | 7.5 | 1.0% | Jun 6, 2022 | An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vu... |
| CVE-2022-31483 | HIGH | 8.8 | 1.6% | Jun 6, 2022 | An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the ... |
| CVE-2022-31482 | HIGH | 7.5 | 1.0% | Jun 6, 2022 | An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now