2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26032 | HIGH | 7.3 | 0.2% | Feb 16, 2023 | Uncontrolled search path element in the Intel(R) Distribution for Python programming language before version 2022.1 for ... |
| CVE-2022-25992 | HIGH | 7.8 | 0.1% | Feb 16, 2023 | Insecure inherited permissions in the Intel(R) oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticate... |
| CVE-2022-25905 | HIGH | 7.3 | 0.2% | Feb 16, 2023 | Uncontrolled search path element in the Intel(R) oneAPI Data Analytics Library (oneDAL) before version 2021.5 for Intel(... |
| CVE-2022-41335 | HIGH | 8.1 | 0.9% | Feb 16, 2023 | A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 an... |
| CVE-2022-40683 | HIGH | 7.8 | 0.2% | Feb 16, 2023 | A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or comma... |
| CVE-2022-40678 | HIGH | 7.8 | 0.1% | Feb 16, 2023 | An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8... |
| CVE-2022-40677 | HIGH | 8.8 | 0.8% | Feb 16, 2023 | A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.0... |
| CVE-2022-40675 | HIGH | 7.4 | 0.4% | Feb 16, 2023 | Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8... |
| CVE-2022-39948 | HIGH | 7.4 | 0.3% | Feb 16, 2023 | An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4 all ... |
| CVE-2022-33871 | HIGH | 7.2 | 0.9% | Feb 16, 2023 | A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6... |
| CVE-2022-33869 | HIGH | 8.8 | 1.3% | Feb 16, 2023 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface ... |
| CVE-2022-30306 | HIGH | 8.8 | 1.0% | Feb 16, 2023 | A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, ... |
| CVE-2022-30303 | HIGH | 8.8 | 2.5% | Feb 16, 2023 | An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0... |
| CVE-2022-27489 | HIGH | 7.2 | 1.5% | Feb 16, 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7... |
| CVE-2022-27482 | HIGH | 7.8 | 0.6% | Feb 16, 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versio... |
| CVE-2022-26115 | HIGH | 7.5 | 0.3% | Feb 16, 2023 | A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may a... |
| CVE-2022-27897 | HIGH | 7.5 | 0.6% | Feb 16, 2023 | Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously... |
| CVE-2022-27892 | HIGH | 7.5 | 0.6% | Feb 16, 2023 | Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to ... |
| CVE-2022-27890 | HIGH | 7.4 | 0.2% | Feb 16, 2023 | It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.... |
| CVE-2022-40016 | HIGH | 7.5 | 0.8% | Feb 15, 2023 | Use After Free (UAF) vulnerability in ireader media-server before commit 3e0f63f1d3553f75c7d4eb32fa7c7a1976a9ff84 in lib... |
| CVE-2022-38935 | HIGH | 8.8 | 0.7% | Feb 15, 2023 | An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/... |
| CVE-2022-38868 | HIGH | 7.2 | 0.9% | Feb 15, 2023 | SQL Injection vulnerability in Ehoney version 2.0.0 in models/protocol.go and models/images.go, allows attackers to exec... |
| CVE-2022-38867 | HIGH | 8.8 | 0.9% | Feb 15, 2023 | SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, 4.0.2, and 4.4.x in api.go, allows attackers to execute arbi... |
| CVE-2022-45546 | HIGH | 7.5 | 0.5% | Feb 15, 2023 | Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacke... |
| CVE-2022-42455 | HIGH | 7.8 | 0.2% | Feb 15, 2023 | ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now