2022 CVE Vulnerabilities
27,518 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38377 | LOW | 2.7 | 0.5% | Nov 25, 2022 | An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.... |
| CVE-2022-40130 | LOW | 3.1 | 0.4% | Nov 18, 2022 | Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress. |
| CVE-2022-42903 | LOW | 3.3 | 0.5% | Nov 17, 2022 | Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list. |
| CVE-2022-41914 | LOW | 3.7 | 0.5% | Nov 16, 2022 | Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity Management(SCIM... |
| CVE-2022-34354 | LOW | 3.3 | 0.2% | Nov 16, 2022 | IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be r... |
| CVE-2022-45393 | LOW | 3.5 | 0.4% | Nov 15, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Delete log Plugin 1.0 and earlier allows attackers to delet... |
| CVE-2022-28764 | LOW | 3.3 | 0.3% | Nov 14, 2022 | The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a loc... |
| CVE-2022-34314 | LOW | 3.3 | 0.2% | Nov 14, 2022 | IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ... |
| CVE-2022-34313 | LOW | 3.1 | 0.6% | Nov 14, 2022 | IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to... |
| CVE-2022-34312 | LOW | 3.3 | 0.2% | Nov 14, 2022 | IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID:... |
| CVE-2022-33973 | LOW | 3.3 | 0.2% | Nov 11, 2022 | Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an... |
| CVE-2022-39388 | LOW | 3.5 | 0.5% | Nov 10, 2022 | Istio is an open platform to connect, manage, and secure microservices. In versions on the 1.15.x branch prior to 1.15.3... |
| CVE-2022-39893 | LOW | 3.3 | 0.2% | Nov 9, 2022 | Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 all... |
| CVE-2022-39889 | LOW | 3.3 | 0.2% | Nov 9, 2022 | Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows... |
| CVE-2022-39887 | LOW | 3.3 | 0.1% | Nov 9, 2022 | Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local ... |
| CVE-2022-39886 | LOW | 3.3 | 0.1% | Nov 9, 2022 | Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local... |
| CVE-2022-39885 | LOW | 3.3 | 0.1% | Nov 9, 2022 | Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 ... |
| CVE-2022-39884 | LOW | 3.3 | 0.1% | Nov 9, 2022 | Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to ... |
| CVE-2022-39879 | LOW | 3.3 | 0.1% | Nov 9, 2022 | Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant pe... |
| CVE-2022-20446 | LOW | 3.3 | 0.1% | Nov 8, 2022 | In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the ba... |
| CVE-2022-38163 | LOW | 3.5 | 0.5% | Nov 7, 2022 | A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. ... |
| CVE-2022-42442 | LOW | 3.3 | 0.2% | Nov 3, 2022 | IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of th... |
| CVE-2022-32913 | LOW | 3.3 | 0.3% | Nov 1, 2022 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Bi... |
| CVE-2022-32879 | LOW | 2.4 | 0.4% | Nov 1, 2022 | A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16, iOS 15.7 an... |
| CVE-2022-32870 | LOW | 2.4 | 0.4% | Nov 1, 2022 | A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now