2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25603 | MEDIUM | 4.8 | 0.5% | Mar 18, 2022 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria Wor... |
| CVE-2022-22671 | MEDIUM | 4.6 | 0.3% | Mar 18, 2022 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A... |
| CVE-2022-22660 | MEDIUM | 5.5 | 0.6% | Mar 18, 2022 | This issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An app may be able to spoof... |
| CVE-2022-22659 | MEDIUM | 6.5 | 0.9% | Mar 18, 2022 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An attacker... |
| CVE-2022-22654 | MEDIUM | 4.3 | 0.9% | Mar 18, 2022 | A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may ... |
| CVE-2022-22652 | MEDIUM | 6.1 | 0.3% | Mar 18, 2022 | The GSMA authentication panel could be presented on the lock screen. The issue was resolved by requiring device unlock t... |
| CVE-2022-22650 | MEDIUM | 5.5 | 0.2% | Mar 18, 2022 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Securit... |
| CVE-2022-22648 | MEDIUM | 5.5 | 0.4% | Mar 18, 2022 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Securit... |
| CVE-2022-22647 | MEDIUM | 4.6 | 0.3% | Mar 18, 2022 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Securit... |
| CVE-2022-22644 | MEDIUM | 5.5 | 0.6% | Mar 18, 2022 | A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue ... |
| CVE-2022-22638 | MEDIUM | 6.5 | 1.9% | Mar 18, 2022 | A null pointer dereference was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS... |
| CVE-2022-22622 | MEDIUM | 4.6 | 0.3% | Mar 18, 2022 | This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical a... |
| CVE-2022-22621 | MEDIUM | 4.6 | 0.3% | Mar 18, 2022 | This issue was addressed with improved checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Montere... |
| CVE-2022-22600 | MEDIUM | 5.5 | 1.6% | Mar 18, 2022 | The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, mac... |
| CVE-2022-22594 | MEDIUM | 6.5 | 0.8% | Mar 18, 2022 | A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 an... |
| CVE-2022-22592 | MEDIUM | 6.5 | 1.5% | Mar 18, 2022 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4... |
| CVE-2022-22589 | MEDIUM | 6.1 | 2.0% | Mar 18, 2022 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watc... |
| CVE-2022-22588 | MEDIUM | 5.5 | 9.4% | Mar 18, 2022 | A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS 1... |
| CVE-2022-22583 | MEDIUM | 5.5 | 1.6% | Mar 18, 2022 | A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, ma... |
| CVE-2022-1003 | MEDIUM | 4.9 | 0.5% | Mar 18, 2022 | One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the syste... |
| CVE-2022-1002 | MEDIUM | 5.4 | 0.6% | Mar 18, 2022 | Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, wh... |
| CVE-2022-24773 | MEDIUM | 5.3 | 0.9% | Mar 18, 2022 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version ... |
| CVE-2022-0758 | MEDIUM | 6.1 | 0.4% | Mar 17, 2022 | Rapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the share... |
| CVE-2022-24302 | MEDIUM | 5.9 | 2.1% | Mar 17, 2022 | In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could al... |
| CVE-2022-24075 | MEDIUM | 6.5 | 0.8% | Mar 17, 2022 | Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could ac... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now