2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20512 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improp... |
| CVE-2022-20511 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead ... |
| CVE-2022-20510 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the n... |
| CVE-2022-20509 | MEDIUM | 6.7 | 0.2% | Dec 16, 2022 | In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This co... |
| CVE-2022-20508 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a per... |
| CVE-2022-20507 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due t... |
| CVE-2022-20506 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of priv... |
| CVE-2022-20505 | MEDIUM | 6.7 | 0.1% | Dec 16, 2022 | In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lea... |
| CVE-2022-20504 | MEDIUM | 6.7 | 0.2% | Dec 16, 2022 | In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalat... |
| CVE-2022-20503 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration du... |
| CVE-2022-20199 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This coul... |
| CVE-2022-47377 | CRITICAL | 9.8 | 0.9% | Dec 16, 2022 | Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivilege... |
| CVE-2022-3109 | HIGH | 7.5 | 1.4% | Dec 16, 2022 | An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return valu... |
| CVE-2022-4555 | MEDIUM | 5.3 | 0.7% | Dec 16, 2022 | The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deacti... |
| CVE-2022-41963 | LOW | 3.1 | 0.4% | Dec 16, 2022 | BigBlueButton is an open source web conferencing system. Versions prior to 2.4.3 contain a whiteboard grace period that ... |
| CVE-2022-36223 | MEDIUM | 6.1 | 0.4% | Dec 16, 2022 | In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administra... |
| CVE-2022-46870 | MEDIUM | 5.4 | 1.1% | Dec 16, 2022 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin... |
| CVE-2022-41962 | LOW | 2.7 | 0.7% | Dec 16, 2022 | BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6, and 2.5-alpha-1 contain Incorrect A... |
| CVE-2022-41961 | MEDIUM | 4.3 | 0.3% | Dec 16, 2022 | BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans... |
| CVE-2022-41960 | MEDIUM | 4.3 | 0.4% | Dec 16, 2022 | BigBlueButton is an open source web conferencing system. Versions prior to 2.4.3, are subject to Insufficient Verificati... |
| CVE-2022-46393 | CRITICAL | 9.8 | 1.1% | Dec 15, 2022 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow ... |
| CVE-2022-46392 | MEDIUM | 5.3 | 0.8% | Dec 15, 2022 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough infor... |
| CVE-2022-45969 | CRITICAL | 9.8 | 1.2% | Dec 15, 2022 | Alist v3.4.0 is vulnerable to Directory Traversal, |
| CVE-2022-45338 | HIGH | 7.8 | 0.2% | Dec 15, 2022 | An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267... |
| CVE-2022-40004 | CRITICAL | 9.6 | 0.9% | Dec 15, 2022 | Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now