2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43265 | CRITICAL | 9.8 | 0.9% | Nov 15, 2022 | An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows at... |
| CVE-2022-42785 | CRITICAL | 9.8 | 1.0% | Nov 15, 2022 | Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, ... |
| CVE-2022-40753 | MEDIUM | 5.4 | 0.4% | Nov 15, 2022 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed ... |
| CVE-2022-3377 | HIGH | 7.8 | 0.2% | Nov 15, 2022 | Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a ... |
| CVE-2022-38385 | HIGH | 8.1 | 0.5% | Nov 15, 2022 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitiv... |
| CVE-2022-38201 | MEDIUM | 6.1 | 0.5% | Nov 15, 2022 | An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.... |
| CVE-2022-30772 | HIGH | 8.2 | 0.2% | Nov 15, 2022 | Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memor... |
| CVE-2022-30771 | HIGH | 8.2 | 0.2% | Nov 15, 2022 | Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization ... |
| CVE-2022-30283 | HIGH | 7.5 | 0.1% | Nov 15, 2022 | In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in pro... |
| CVE-2022-29275 | HIGH | 8.2 | 0.2% | Nov 15, 2022 | In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM ... |
| CVE-2022-24942 | CRITICAL | 9.8 | 1.9% | Nov 15, 2022 | Heap based buffer overflow in HTTP Server functionality in Micrium uC-HTTP 3.01.01 allows remote code execution via HTT... |
| CVE-2022-20950 | MEDIUM | 5.3 | 0.8% | Nov 15, 2022 | A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an u... |
| CVE-2022-20949 | MEDIUM | 4.9 | 0.7% | Nov 15, 2022 | A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticat... |
| CVE-2022-20947 | HIGH | 7.5 | 0.9% | Nov 15, 2022 | A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and F... |
| CVE-2022-20946 | HIGH | 7.5 | 0.9% | Nov 15, 2022 | A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defens... |
| CVE-2022-20943 | MEDIUM | 5.8 | 0.9% | Nov 15, 2022 | Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multipl... |
| CVE-2022-20941 | MEDIUM | 5.3 | 0.7% | Nov 15, 2022 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an... |
| CVE-2022-20940 | MEDIUM | 5.3 | 0.6% | Nov 15, 2022 | A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remo... |
| CVE-2022-20938 | MEDIUM | 4.3 | 0.5% | Nov 15, 2022 | A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC)... |
| CVE-2022-20936 | MEDIUM | 4.8 | 0.4% | Nov 15, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could... |
| CVE-2022-20935 | MEDIUM | 4.8 | 0.4% | Nov 15, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could... |
| CVE-2022-20934 | MEDIUM | 6.7 | 0.3% | Nov 15, 2022 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authe... |
| CVE-2022-20932 | MEDIUM | 4.8 | 0.5% | Nov 15, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could... |
| CVE-2022-20928 | MEDIUM | 5.8 | 0.7% | Nov 15, 2022 | A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (... |
| CVE-2022-20927 | MEDIUM | 6.5 | 0.5% | Nov 15, 2022 | A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Def... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now