2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-45194MEDIUM4.7CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.
CVE-2022-45193HIGH8.8CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privil...
CVE-2022-41905MEDIUM6.1WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory brows...
CVE-2022-45182CRITICAL9.8Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter.
CVE-2022-41906HIGH8.7OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via E...
CVE-2022-41904MEDIUM6.5Element iOS is an iOS Matrix client provided by Element. It is based on MatrixSDK. Prior to version 1.9.7, events encryp...
CVE-2022-41882HIGH7.8The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, ...
CVE-2022-40750MEDIUM5.4IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to ...
CVE-2022-38387HIGH8.8IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbit...
CVE-2022-36776MEDIUM5.4IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting. This vulnerability allo...
CVE-2022-31772MEDIUM6.5 IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a d...
CVE-2022-34331CRITICAL9.8After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly con...
CVE-2022-3959MEDIUM5.3A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is so...
CVE-2022-3957MEDIUM6.5A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_pr...
CVE-2022-3956CRITICAL9.8A vulnerability classified as critical has been found in tsruban HHIMS 2.1. Affected is an unknown function of the compo...
CVE-2022-3955CRITICAL9.8A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of ...
CVE-2022-38099HIGH7.8Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may al...
CVE-2022-37345HIGH7.8Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated...
CVE-2022-37334HIGH7.8Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version...
CVE-2022-36789HIGH7.8Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini ...
CVE-2022-36400HIGH7.8Path traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before versio...
CVE-2022-36384HIGH7.3Unquoted search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before ...
CVE-2022-36380HIGH7.3Uncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 bef...
CVE-2022-36377HIGH7.8Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mi...
CVE-2022-36370HIGH7.8Improper authentication in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now