2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43982 | MEDIUM | 6.1 | 1.4% | Nov 2, 2022 | In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `... |
| CVE-2022-42473 | MEDIUM | 5.5 | 0.2% | Nov 2, 2022 | A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and... |
| CVE-2022-39950 | MEDIUM | 5.4 | 0.7% | Nov 2, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] exists in FortiManager and FortiAn... |
| CVE-2022-39949 | MEDIUM | 5.5 | 0.2% | Nov 2, 2022 | An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 throug... |
| CVE-2022-39945 | MEDIUM | 6.5 | 0.3% | Nov 2, 2022 | An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all ve... |
| CVE-2022-38381 | CRITICAL | 9.8 | 0.7% | Nov 2, 2022 | An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all version... |
| CVE-2022-38380 | MEDIUM | 4.3 | 23.0% | Nov 2, 2022 | An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a... |
| CVE-2022-38374 | MEDIUM | 6.1 | 1.7% | Nov 2, 2022 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0.... |
| CVE-2022-38373 | MEDIUM | 5.4 | 0.4% | Nov 2, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interf... |
| CVE-2022-38372 | MEDIUM | 6.7 | 0.2% | Nov 2, 2022 | A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 throu... |
| CVE-2022-35851 | MEDIUM | 5.4 | 0.4% | Nov 2, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7... |
| CVE-2022-35842 | HIGH | 7.5 | 0.6% | Nov 2, 2022 | An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0,... |
| CVE-2022-33878 | MEDIUM | 5.5 | 0.1% | Nov 2, 2022 | An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.... |
| CVE-2022-33870 | HIGH | 7.8 | 0.4% | Nov 2, 2022 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpre... |
| CVE-2022-30307 | HIGH | 8.1 | 0.4% | Nov 2, 2022 | A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and belo... |
| CVE-2022-26122 | HIGH | 8.6 | 0.4% | Nov 2, 2022 | An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engin... |
| CVE-2022-26119 | HIGH | 7.8 | 0.2% | Nov 2, 2022 | A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to pe... |
| CVE-2022-3723 | HIGH | 8.8 | 6.8% | Nov 1, 2022 | Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2022-3661 | MEDIUM | 4.3 | 0.4% | Nov 1, 2022 | Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had com... |
| CVE-2022-3660 | MEDIUM | 4.3 | 0.5% | Nov 1, 2022 | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote att... |
| CVE-2022-3659 | HIGH | 8.8 | 0.5% | Nov 1, 2022 | Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convi... |
| CVE-2022-3658 | HIGH | 8.8 | 0.4% | Nov 1, 2022 | Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker... |
| CVE-2022-3657 | HIGH | 8.8 | 0.3% | Nov 1, 2022 | Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install... |
| CVE-2022-3656 | HIGH | 8.8 | 1.7% | Nov 1, 2022 | Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass ... |
| CVE-2022-3655 | HIGH | 8.8 | 0.4% | Nov 1, 2022 | Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now