2022 CVE Vulnerabilities
27,565 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40760 | HIGH | 7.5 | 1.1% | Sep 16, 2022 | A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 a... |
| CVE-2022-40759 | HIGH | 7.5 | 0.8% | Sep 16, 2022 | A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted ap... |
| CVE-2022-40758 | HIGH | 7.5 | 0.8% | Sep 16, 2022 | A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.... |
| CVE-2022-40757 | HIGH | 7.5 | 0.8% | Sep 16, 2022 | A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0... |
| CVE-2022-40755 | MEDIUM | 5.5 | 0.4% | Sep 16, 2022 | JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c. |
| CVE-2022-3217 | HIGH | 7.5 | 1.1% | Sep 16, 2022 | When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate l... |
| CVE-2022-37709 | MEDIUM | 5.3 | 0.5% | Sep 16, 2022 | Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. ... |
| CVE-2022-37258 | CRITICAL | 9.8 | 1.2% | Sep 16, 2022 | Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName ... |
| CVE-2022-37251 | MEDIUM | 5.4 | 0.4% | Sep 16, 2022 | Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts. |
| CVE-2022-37247 | MEDIUM | 5.4 | 0.4% | Sep 16, 2022 | Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page. |
| CVE-2022-36026 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits`... |
| CVE-2022-36019 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or `ma... |
| CVE-2022-36018 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits` lis... |
| CVE-2022-35990 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_per_chann... |
| CVE-2022-35989 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. When `MaxPool` receives a window size input array `ksize` wi... |
| CVE-2022-35988 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. When `tf.linalg.matrix_rank` receives an empty input `a`, th... |
| CVE-2022-35987 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. `DenseBincount` assumes its input tensor `weights` to either... |
| CVE-2022-35986 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. If `RaggedBincount` is given an empty input tensor `splits`,... |
| CVE-2022-35985 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that is... |
| CVE-2022-35984 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type `i... |
| CVE-2022-35983 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an unsuppor... |
| CVE-2022-35982 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. If `SparseBincount` is given inputs for `indices`, `values`,... |
| CVE-2022-35981 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK` fa... |
| CVE-2022-35979 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | TensorFlow is an open source platform for machine learning. If `QuantizedRelu` or `QuantizedRelu6` are given nonscalar i... |
| CVE-2022-35194 | MEDIUM | 5.4 | 0.5% | Sep 16, 2022 | TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventor... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now