2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0111 | MEDIUM | 6.5 | 0.8% | Feb 12, 2022 | Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrect... |
| CVE-2022-0110 | MEDIUM | 4.3 | 1.1% | Feb 12, 2022 | Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents... |
| CVE-2022-0109 | MEDIUM | 6.5 | 1.3% | Feb 12, 2022 | Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain pote... |
| CVE-2022-0108 | MEDIUM | 6.5 | 1.2% | Feb 12, 2022 | Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cros... |
| CVE-2022-24968 | MEDIUM | 5.9 | 0.6% | Feb 11, 2022 | In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket conn... |
| CVE-2022-23634 | MEDIUM | 5.9 | 2.1% | Feb 11, 2022 | Puma is a Ruby/Rack web server built for parallelism. Prior to `puma` version `5.6.2`, `puma` may not always call `close... |
| CVE-2022-23633 | MEDIUM | 5.9 | 2.2% | Feb 11, 2022 | Action Pack is a framework for handling and responding to web requests. Under certain circumstances response bodies will... |
| CVE-2022-22766 | MEDIUM | 5.5 | 0.2% | Feb 11, 2022 | Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to ... |
| CVE-2022-24926 | MEDIUM | 5.4 | 0.5% | Feb 11, 2022 | Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows privileged attackers to trigg... |
| CVE-2022-24925 | MEDIUM | 6.5 | 0.2% | Feb 11, 2022 | Improper input validation vulnerability in SettingsProvider prior to Android S(12) allows privileged attackers to trigge... |
| CVE-2022-24924 | MEDIUM | 5.3 | 0.7% | Feb 11, 2022 | An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system di... |
| CVE-2022-24003 | MEDIUM | 5.3 | 0.5% | Feb 11, 2022 | Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access int... |
| CVE-2022-24002 | MEDIUM | 5.3 | 0.5% | Feb 11, 2022 | Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activ... |
| CVE-2022-24001 | MEDIUM | 4.6 | 0.1% | Feb 11, 2022 | Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot... |
| CVE-2022-23998 | MEDIUM | 5.5 | 0.6% | Feb 11, 2022 | Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(1... |
| CVE-2022-23707 | MEDIUM | 5.4 | 0.5% | Feb 11, 2022 | An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permission... |
| CVE-2022-23433 | MEDIUM | 5.3 | 0.6% | Feb 11, 2022 | Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Andro... |
| CVE-2022-23432 | MEDIUM | 6.7 | 0.1% | Feb 11, 2022 | An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memo... |
| CVE-2022-23431 | MEDIUM | 6.7 | 0.1% | Feb 11, 2022 | An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution... |
| CVE-2022-23429 | MEDIUM | 4.4 | 0.1% | Feb 11, 2022 | An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory ... |
| CVE-2022-23426 | MEDIUM | 6 | 0.1% | Feb 11, 2022 | A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to acces... |
| CVE-2022-22291 | MEDIUM | 5.5 | 0.1% | Feb 11, 2022 | Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get ... |
| CVE-2022-0562 | MEDIUM | 5.5 | 1.3% | Feb 11, 2022 | Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff ve... |
| CVE-2022-0561 | MEDIUM | 5.5 | 1.3% | Feb 11, 2022 | Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff ... |
| CVE-2022-0382 | MEDIUM | 5.5 | 0.4% | Feb 11, 2022 | An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now