2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-32579HIGH7.2Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u...
CVE-2022-30944MEDIUM5.5Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to...
CVE-2022-30601CRITICAL9.8Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated u...
CVE-2022-28858HIGH7.8Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileg...
CVE-2022-28697MEDIUM6.8Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated us...
CVE-2022-27493HIGH7.8Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u...
CVE-2022-37770MEDIUM6.5libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.c...
CVE-2022-37769MEDIUM6.5libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. Thi...
CVE-2022-37768HIGH7.5libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.
CVE-2022-37049HIGH7.8The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common...
CVE-2022-37048HIGH7.8The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protoco...
CVE-2022-37047HIGH7.8The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at ...
CVE-2022-36729CRITICAL9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /librar...
CVE-2022-36728CRITICAL9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staf...
CVE-2022-36727CRITICAL9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staf...
CVE-2022-36725CRITICAL9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /studen...
CVE-2022-36722CRITICAL9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /libra...
CVE-2022-35213MEDIUM6.1Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a cross-site scripting (XSS) vulnerabilit...
CVE-2022-35212MEDIUM6.1osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db...
CVE-2022-30296HIGH7.5Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an ...
CVE-2022-2568MEDIUM6.5A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user w...
CVE-2022-29507MEDIUM5.5Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authentic...
CVE-2022-28757HIGH7.8The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contain...
CVE-2022-28709MEDIUM4.4Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a p...
CVE-2022-28696HIGH7.8Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may allow an authenticated user...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now