2022 CVE Vulnerabilities
27,525 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4123 | LOW | 3.3 | 0.2% | Dec 8, 2022 | A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path ... |
| CVE-2022-41802 | LOW | 3.3 | 0.2% | Dec 8, 2022 | Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerabili... |
| CVE-2022-39914 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to And... |
| CVE-2022-39913 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T(13) allows local attack... |
| CVE-2022-39912 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to A... |
| CVE-2022-39906 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to access... |
| CVE-2022-39904 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attacke... |
| CVE-2022-39903 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS i... |
| CVE-2022-39898 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows attackers to access some i... |
| CVE-2022-39896 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to access sensitive informati... |
| CVE-2022-39895 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release 1 allows to access cont... |
| CVE-2022-39894 | LOW | 3.3 | 0.1% | Dec 8, 2022 | Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows ... |
| CVE-2022-42769 | LOW | 3.3 | 0.1% | Dec 6, 2022 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
| CVE-2022-42767 | LOW | 3.3 | 0.1% | Dec 6, 2022 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
| CVE-2022-42758 | LOW | 3.3 | 0.1% | Dec 6, 2022 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
| CVE-2022-42757 | LOW | 3.3 | 0.1% | Dec 6, 2022 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
| CVE-2022-34881 | LOW | 3.3 | 0.2% | Dec 6, 2022 | Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows loc... |
| CVE-2022-4270 | LOW | 2.6 | 0.5% | Dec 2, 2022 | Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permi... |
| CVE-2022-41969 | LOW | 2.7 | 0.8% | Dec 1, 2022 | Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.11, 24.0.7, and 25.0.0, there is no pas... |
| CVE-2022-3710 | LOW | 2.7 | 0.7% | Dec 1, 2022 | A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database conten... |
| CVE-2022-46156 | LOW | 3.3 | 0.5% | Nov 30, 2022 | The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes ... |
| CVE-2022-45842 | LOW | 3.7 | 0.3% | Nov 30, 2022 | Unauth. Race Condition vulnerability in WP ULike Plugin <= 4.6.4 on WordPress allows attackers to increase/decrease rati... |
| CVE-2022-32967 | LOW | 2.1 | 0.2% | Nov 29, 2022 | RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-c... |
| CVE-2022-41954 | LOW | 3.3 | 0.2% | Nov 25, 2022 | MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-lik... |
| CVE-2022-38377 | LOW | 2.7 | 0.5% | Nov 25, 2022 | An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now