2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21181 | HIGH | 7.8 | 0.3% | Aug 18, 2022 | Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged use... |
| CVE-2022-21172 | MEDIUM | 6.7 | 0.2% | Aug 18, 2022 | Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable es... |
| CVE-2022-21160 | HIGH | 7.5 | 0.7% | Aug 18, 2022 | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potent... |
| CVE-2022-21152 | MEDIUM | 5.5 | 0.2% | Aug 18, 2022 | Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenti... |
| CVE-2022-21148 | HIGH | 7.8 | 0.2% | Aug 18, 2022 | Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenti... |
| CVE-2022-21140 | MEDIUM | 5.5 | 0.2% | Aug 18, 2022 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user ... |
| CVE-2022-21139 | HIGH | 8.8 | 0.2% | Aug 18, 2022 | Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to pote... |
| CVE-2022-37422 | HIGH | 7.5 | 1.1% | Aug 18, 2022 | Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and... |
| CVE-2022-35976 | CRITICAL | 9.8 | 0.4% | Aug 18, 2022 | The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A speciall... |
| CVE-2022-35204 | MEDIUM | 4.3 | 1.1% | Aug 18, 2022 | Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the v... |
| CVE-2022-2625 | HIGH | 8 | 2.0% | Aug 18, 2022 | A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one... |
| CVE-2022-37063 | MEDIUM | 5.4 | 1.3% | Aug 18, 2022 | All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) du... |
| CVE-2022-37062 | HIGH | 7.5 | 2.6% | Aug 18, 2022 | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability... |
| CVE-2022-37061 | CRITICAL | 9.8 | 99.6% | Aug 18, 2022 | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This... |
| CVE-2022-35975 | CRITICAL | 9.8 | 1.1% | Aug 18, 2022 | The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may all... |
| CVE-2022-35175 | CRITICAL | 9.8 | 0.8% | Aug 18, 2022 | Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /... |
| CVE-2022-35174 | MEDIUM | 5.4 | 0.6% | Aug 18, 2022 | A stored cross-site scripting (XSS) vulnerability in Kirby's Starterkit v3.7.0.2 allows attackers to execute arbitrary w... |
| CVE-2022-37060 | HIGH | 7.5 | 15.2% | Aug 18, 2022 | FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an impro... |
| CVE-2022-36023 | MEDIUM | 5.3 | 0.9% | Aug 18, 2022 | Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applica... |
| CVE-2022-2874 | MEDIUM | 5.5 | 0.5% | Aug 18, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. |
| CVE-2022-36024 | MEDIUM | 6.5 | 0.7% | Aug 18, 2022 | py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to r... |
| CVE-2022-37025 | HIGH | 7.8 | 0.2% | Aug 18, 2022 | An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local ... |
| CVE-2022-29550 | MEDIUM | 5.5 | 0.4% | Aug 18, 2022 | An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe" output to the /var/log/qualys/qualys-cloud... |
| CVE-2022-29549 | HIGH | 7.3 | 0.3% | Aug 18, 2022 | An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first mak... |
| CVE-2022-33311 | MEDIUM | 4.3 | 0.7% | Aug 18, 2022 | Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now