2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45501 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset. |
| CVE-2022-45499 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterG... |
| CVE-2022-45498 | HIGH | 7.5 | 0.8% | Dec 8, 2022 | An issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S v1.0.0.4(510) allows unauthenticat... |
| CVE-2022-45497 | CRITICAL | 9.8 | 2.5% | Dec 8, 2022 | Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function... |
| CVE-2022-45118 | MEDIUM | 5.5 | 0.2% | Dec 8, 2022 | OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events ... |
| CVE-2022-44932 | HIGH | 7.5 | 0.7% | Dec 8, 2022 | An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service. |
| CVE-2022-44931 | HIGH | 7.5 | 0.9% | Dec 8, 2022 | Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet. |
| CVE-2022-44455 | HIGH | 7.8 | 0.2% | Dec 8, 2022 | The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer o... |
| CVE-2022-41802 | LOW | 3.3 | 0.2% | Dec 8, 2022 | Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerabili... |
| CVE-2022-3262 | HIGH | 8.1 | 0.7% | Dec 8, 2022 | A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a ... |
| CVE-2022-3260 | MEDIUM | 4.8 | 0.4% | Dec 8, 2022 | The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers wo... |
| CVE-2022-39915 | MEDIUM | 5.5 | 0.3% | Dec 8, 2022 | Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android ... |
| CVE-2022-39914 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to And... |
| CVE-2022-39913 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T(13) allows local attack... |
| CVE-2022-39912 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to A... |
| CVE-2022-39911 | MEDIUM | 6.8 | 0.2% | Dec 8, 2022 | Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows atta... |
| CVE-2022-39910 | MEDIUM | 4.2 | 0.3% | Dec 8, 2022 | Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data ... |
| CVE-2022-39909 | MEDIUM | 5.5 | 0.1% | Dec 8, 2022 | Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.22101... |
| CVE-2022-39908 | HIGH | 7.4 | 0.1% | Dec 8, 2022 | TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attac... |
| CVE-2022-39907 | HIGH | 7.8 | 0.1% | Dec 8, 2022 | Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows l... |
| CVE-2022-39906 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to access... |
| CVE-2022-39905 | MEDIUM | 5.5 | 0.1% | Dec 8, 2022 | Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access... |
| CVE-2022-39904 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attacke... |
| CVE-2022-39903 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS i... |
| CVE-2022-39902 | HIGH | 7.5 | 0.8% | Dec 8, 2022 | Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive inform... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now