2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4290 | HIGH | 8.8 | 0.8% | Oct 20, 2023 | The Cyr to Lat plugin for WordPress is vulnerable to authenticated SQL Injection via the 'ctl_sanitize_title' function i... |
| CVE-2022-3342 | HIGH | 8.8 | 1.0% | Oct 20, 2023 | The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the ‘zbscrmcsvimpf’ parameter in the 'zer... |
| CVE-2022-2441 | HIGH | 8.8 | 1.1% | Oct 20, 2023 | The ImageMagick Engine plugin for WordPress is vulnerable to remote code execution via the 'cli_path' parameter in versi... |
| CVE-2022-27813 | HIGH | 8.2 | 0.2% | Oct 19, 2023 | Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM a... |
| CVE-2022-26943 | HIGH | 8.8 | 0.3% | Oct 19, 2023 | The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register ... |
| CVE-2022-26942 | HIGH | 8.2 | 0.2% | Oct 19, 2023 | The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE)... |
| CVE-2022-26941 | HIGH | 8.8 | 0.3% | Oct 19, 2023 | A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An ... |
| CVE-2022-25334 | HIGH | 8.8 | 0.2% | Oct 19, 2023 | The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signat... |
| CVE-2022-25333 | HIGH | 8.8 | 0.1% | Oct 19, 2023 | The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented ... |
| CVE-2022-24404 | HIGH | 7.5 | 0.2% | Oct 19, 2023 | Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this ... |
| CVE-2022-24402 | HIGH | 7.5 | 0.6% | Oct 19, 2023 | The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to o... |
| CVE-2022-24401 | HIGH | 8.1 | 0.3% | Oct 19, 2023 | Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV genera... |
| CVE-2022-22385 | HIGH | 7.5 | 0.4% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmiss... |
| CVE-2022-22375 | HIGH | 8.8 | 1.2% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a remote authenticated attacker to execute arbitrary command... |
| CVE-2022-43740 | HIGH | 7.5 | 0.8% | Oct 14, 2023 | IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled reso... |
| CVE-2022-33165 | HIGH | 7.5 | 1.2% | Oct 14, 2023 | IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker cou... |
| CVE-2022-44757 | HIGH | 8.2 | 0.3% | Oct 11, 2023 | BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An att... |
| CVE-2022-22298 | HIGH | 7.8 | 0.5% | Oct 10, 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator v... |
| CVE-2022-30527 | HIGH | 7.8 | 0.2% | Oct 10, 2023 | A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access... |
| CVE-2022-3431 | HIGH | 7.8 | 0.2% | Oct 9, 2023 | A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that wa... |
| CVE-2022-33160 | HIGH | 7.5 | 0.3% | Oct 6, 2023 | IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to de... |
| CVE-2022-47175 | HIGH | 8.8 | 0.2% | Oct 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in P Royal Royal Elementor Addons and Templates plugin <= 1.3.75 version... |
| CVE-2022-3248 | HIGH | 7.5 | 0.4% | Oct 5, 2023 | A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow ... |
| CVE-2022-22447 | HIGH | 7.5 | 0.4% | Oct 4, 2023 | IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclo... |
| CVE-2022-47892 | HIGH | 7.5 | 0.5% | Oct 3, 2023 | All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensiti... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now