2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4439 | HIGH | 8.8 | 0.6% | Dec 14, 2022 | Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the u... |
| CVE-2022-4438 | HIGH | 8.8 | 0.7% | Dec 14, 2022 | Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user... |
| CVE-2022-4437 | HIGH | 8.8 | 0.7% | Dec 14, 2022 | Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit hea... |
| CVE-2022-4436 | HIGH | 8.8 | 0.6% | Dec 14, 2022 | Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit ... |
| CVE-2022-24377 | CRITICAL | 9.8 | 2.3% | Dec 14, 2022 | The package cycle-import-check before 1.3.2 are vulnerable to Command Injection via the writeFileToTmpDirAndOpenIt funct... |
| CVE-2022-42141 | MEDIUM | 5.4 | 0.5% | Dec 14, 2022 | Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting (XSS) via lform/urlfilter. |
| CVE-2022-42140 | HIGH | 7.2 | 2.4% | Dec 14, 2022 | Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/net_diagnose. |
| CVE-2022-42139 | HIGH | 8.8 | 18.2% | Dec 14, 2022 | Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL. |
| CVE-2022-40264 | HIGH | 7.1 | 0.3% | Dec 14, 2022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Elect... |
| CVE-2022-37155 | HIGH | 8.8 | 40.0% | Dec 14, 2022 | RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via the _oups parameter. |
| CVE-2022-44874 | MEDIUM | 5.5 | 0.3% | Dec 13, 2022 | wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component o... |
| CVE-2022-46381 | MEDIUM | 6.1 | 1.7% | Dec 13, 2022 | Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_templat... |
| CVE-2022-43996 | MEDIUM | 5.4 | 0.5% | Dec 13, 2022 | The csaf_provider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html. The endpoint upload... |
| CVE-2022-41653 | CRITICAL | 9.8 | 0.7% | Dec 13, 2022 | Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user l... |
| CVE-2022-38355 | MEDIUM | 5.5 | 0.4% | Dec 13, 2022 | Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to t... |
| CVE-2022-2757 | CRITICAL | 9.1 | 0.7% | Dec 13, 2022 | Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an ... |
| CVE-2022-2660 | HIGH | 7.5 | 0.6% | Dec 13, 2022 | Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic k... |
| CVE-2022-4207 | MEDIUM | 5.4 | 0.5% | Dec 13, 2022 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values th... |
| CVE-2022-4171 | HIGH | 7.5 | 0.7% | Dec 13, 2022 | The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and includ... |
| CVE-2022-46404 | CRITICAL | 9.8 | 1.8% | Dec 13, 2022 | A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Ma... |
| CVE-2022-38628 | MEDIUM | 6.1 | 0.9% | Dec 13, 2022 | Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered ... |
| CVE-2022-2951 | HIGH | 7.8 | 0.3% | Dec 13, 2022 | Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerabi... |
| CVE-2022-2950 | HIGH | 7.8 | 0.3% | Dec 13, 2022 | Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerabilit... |
| CVE-2022-2949 | HIGH | 7.8 | 0.3% | Dec 13, 2022 | Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerabilit... |
| CVE-2022-2947 | HIGH | 7.8 | 0.3% | Dec 13, 2022 | Altair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but can read from or wri... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now