2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-46330HIGH7.8Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop...
CVE-2022-46282HIGH7.8Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a...
CVE-2022-44449MEDIUM4.8Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacke...
CVE-2022-43543MEDIUM5.4KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handlin...
CVE-2022-47635CRITICAL9.8Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request ...
CVE-2022-25929MEDIUM5.4The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting (XSS) due to improper user inp...
CVE-2022-25895HIGH7.5All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sand...
CVE-2022-25893CRITICAL9.8The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the We...
CVE-2022-24431CRITICAL9.8All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper ...
CVE-2022-38546CRITICAL9.8A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unaut...
CVE-2022-4617MEDIUM6.1Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2.
CVE-2022-42949HIGH7.5Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.
CVE-2022-47629CRITICAL9.8Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
CVE-2022-42046HIGH7.8wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to perform local privilege escalation
CVE-2022-46328HIGH7.5Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data ...
CVE-2022-46327CRITICAL9.8Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation...
CVE-2022-46326CRITICAL9.8Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sys...
CVE-2022-46325CRITICAL9.8Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause syst...
CVE-2022-46324CRITICAL9.8Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sys...
CVE-2022-46323CRITICAL9.8Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause syst...
CVE-2022-46322HIGH7.5Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sys...
CVE-2022-46321HIGH7.5The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affec...
CVE-2022-46320CRITICAL9.8The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memor...
CVE-2022-46319CRITICAL9.8Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability ...
CVE-2022-46318MEDIUM5.3The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account remo...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now