2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25024 | HIGH | 7.5 | 1.0% | Aug 22, 2023 | The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can le... |
| CVE-2022-46751 | HIGH | 8.2 | 1.8% | Aug 21, 2023 | Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache... |
| CVE-2022-4894 | HIGH | 7.3 | 0.2% | Aug 16, 2023 | Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontro... |
| CVE-2022-48503 | HIGH | 8.8 | 3.1% | Aug 14, 2023 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS ... |
| CVE-2022-46706 | HIGH | 7.8 | 0.2% | Aug 14, 2023 | A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catal... |
| CVE-2022-42828 | HIGH | 8.8 | 0.6% | Aug 14, 2023 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex... |
| CVE-2022-45112 | HIGH | 7.8 | 0.2% | Aug 11, 2023 | Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated user to pote... |
| CVE-2022-44611 | HIGH | 8 | 0.3% | Aug 11, 2023 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially e... |
| CVE-2022-43456 | HIGH | 7.8 | 0.1% | Aug 11, 2023 | Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and ... |
| CVE-2022-38973 | HIGH | 7.1 | 0.1% | Aug 11, 2023 | Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2... |
| CVE-2022-38076 | HIGH | 7.8 | 0.3% | Aug 11, 2023 | Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated ... |
| CVE-2022-36392 | HIGH | 7.5 | 0.6% | Aug 11, 2023 | Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94,... |
| CVE-2022-29871 | HIGH | 7.8 | 0.2% | Aug 11, 2023 | Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated use... |
| CVE-2022-29470 | HIGH | 7.8 | 0.1% | Aug 11, 2023 | Improper access control in the Intel® DTT Software before version 8.7.10400.15482 may allow an authenticated user to pot... |
| CVE-2022-25864 | HIGH | 7.8 | 0.1% | Aug 11, 2023 | Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to poten... |
| CVE-2022-47636 | HIGH | 7.8 | 1.1% | Aug 10, 2023 | A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open... |
| CVE-2022-48604 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user... |
| CVE-2022-48603 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitiz... |
| CVE-2022-48602 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitize... |
| CVE-2022-48601 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitize... |
| CVE-2022-48600 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐con... |
| CVE-2022-48599 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitize... |
| CVE-2022-48598 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsan... |
| CVE-2022-48597 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized... |
| CVE-2022-48596 | HIGH | 8.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitiz... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now