2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45706 | CRITICAL | 9.8 | 1.1% | Dec 23, 2022 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCh... |
| CVE-2022-43381 | MEDIUM | 6.2 | 0.2% | Dec 23, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX SMB cl... |
| CVE-2022-43380 | MEDIUM | 6.2 | 0.2% | Dec 23, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS k... |
| CVE-2022-40233 | MEDIUM | 6.2 | 0.2% | Dec 23, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP... |
| CVE-2022-39165 | MEDIUM | 6.2 | 0.2% | Dec 23, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a ... |
| CVE-2022-47943 | HIGH | 8.1 | 3.5% | Dec 23, 2022 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and... |
| CVE-2022-4698 | MEDIUM | 4.8 | 0.6% | Dec 23, 2022 | The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions u... |
| CVE-2022-4697 | MEDIUM | 4.8 | 0.7% | Dec 23, 2022 | The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_user_cover_default_image_... |
| CVE-2022-47942 | HIGH | 8.8 | 3.6% | Dec 23, 2022 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overf... |
| CVE-2022-47941 | HIGH | 7.5 | 4.9% | Dec 23, 2022 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree c... |
| CVE-2022-47940 | HIGH | 8.1 | 1.4% | Dec 23, 2022 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length v... |
| CVE-2022-47939 | CRITICAL | 9.8 | 46.4% | Dec 23, 2022 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after... |
| CVE-2022-47938 | MEDIUM | 6.5 | 58.5% | Dec 23, 2022 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-... |
| CVE-2022-38757 | HIGH | 7.2 | 0.8% | Dec 23, 2022 | A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows... |
| CVE-2022-46642 | CRITICAL | 9.9 | 3.1% | Dec 23, 2022 | D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour paramet... |
| CVE-2022-46641 | CRITICAL | 9.9 | 3.1% | Dec 23, 2022 | D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist p... |
| CVE-2022-44567 | CRITICAL | 9.8 | 1.7% | Dec 23, 2022 | A command injection vulnerability exists in Rocket.Chat-Desktop <3.8.14 that could allow an attacker to pass a malicious... |
| CVE-2022-44565 | MEDIUM | 5.3 | 0.4% | Dec 23, 2022 | An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.... |
| CVE-2022-43551 | HIGH | 7.5 | 16.5% | Dec 23, 2022 | A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS ... |
| CVE-2022-23547 | CRITICAL | 9.8 | 0.9% | Dec 23, 2022 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto... |
| CVE-2022-47524 | MEDIUM | 5.4 | 0.4% | Dec 23, 2022 | F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack. |
| CVE-2022-46171 | HIGH | 7.7 | 1.0% | Dec 23, 2022 | Tauri is a framework for building binaries for all major desktop platforms. The filesystem glob pattern wildcards `*`, `... |
| CVE-2022-4690 | MEDIUM | 5.4 | 0.6% | Dec 23, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. |
| CVE-2022-4689 | HIGH | 8.8 | 0.7% | Dec 23, 2022 | Improper Access Control in GitHub repository usememos/memos prior to 0.9.0. |
| CVE-2022-4688 | HIGH | 8.8 | 0.7% | Dec 23, 2022 | Improper Authorization in GitHub repository usememos/memos prior to 0.9.0. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now