2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41814 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account ... |
| CVE-2022-41789 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permiss... |
| CVE-2022-41611 | MEDIUM | 4.8 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to in... |
| CVE-2022-3958 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account... |
| CVE-2022-3895 | MEDIUM | 6.1 | 0.3% | Nov 15, 2022 | Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output... |
| CVE-2022-3893 | MEDIUM | 4.8 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permission... |
| CVE-2022-3240 | HIGH | 8.8 | 0.6% | Nov 15, 2022 | The "Follow Me Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including... |
| CVE-2022-40309 | MEDIUM | 4.3 | 1.4% | Nov 15, 2022 | Users with write permissions to a repository can delete arbitrary directories. |
| CVE-2022-40308 | HIGH | 7.5 | 1.2% | Nov 15, 2022 | If anonymous read enabled, it's possible to read the database file directly without logging in. |
| CVE-2022-3737 | HIGH | 7.8 | 0.2% | Nov 15, 2022 | In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to ... |
| CVE-2022-3480 | HIGH | 7.5 | 0.9% | Nov 15, 2022 | A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices be... |
| CVE-2022-3461 | HIGH | 7.8 | 0.2% | Nov 15, 2022 | In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a... |
| CVE-2022-33239 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapd... |
| CVE-2022-33237 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Co... |
| CVE-2022-33236 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute... |
| CVE-2022-33234 | CRITICAL | 9.8 | 0.3% | Nov 15, 2022 | Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit... |
| CVE-2022-25743 | HIGH | 7.8 | 0.1% | Nov 15, 2022 | Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compu... |
| CVE-2022-25742 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snap... |
| CVE-2022-25741 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Au... |
| CVE-2022-25727 | CRITICAL | 9.8 | 0.4% | Nov 15, 2022 | Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon... |
| CVE-2022-25724 | HIGH | 7.8 | 0.1% | Nov 15, 2022 | Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Co... |
| CVE-2022-25710 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT,... |
| CVE-2022-25679 | MEDIUM | 5.5 | 0.1% | Nov 15, 2022 | Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consu... |
| CVE-2022-25676 | MEDIUM | 5.5 | 0.1% | Nov 15, 2022 | Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, ... |
| CVE-2022-25674 | CRITICAL | 9.8 | 0.3% | Nov 15, 2022 | Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdra... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now