2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41761 | MEDIUM | 6.5 | 0.8% | Dec 25, 2023 | An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewl... |
| CVE-2022-41760 | MEDIUM | 6.5 | 0.8% | Dec 25, 2023 | An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Netwo... |
| CVE-2022-39820 | MEDIUM | 6.5 | 0.6% | Dec 25, 2023 | In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/... |
| CVE-2022-44684 | MEDIUM | 6.5 | 1.5% | Dec 20, 2023 | Windows Local Session Manager (LSM) Denial of Service Vulnerability |
| CVE-2022-43450 | MEDIUM | 6.5 | 0.7% | Dec 19, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through... |
| CVE-2022-40312 | MEDIUM | 6.5 | 0.4% | Dec 18, 2023 | Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue ... |
| CVE-2022-41677 | MEDIUM | 5.3 | 0.5% | Dec 18, 2023 | An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker t... |
| CVE-2022-24351 | MEDIUM | 4.7 | 0.1% | Dec 16, 2023 | TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before versi... |
| CVE-2022-45365 | MEDIUM | 6.1 | 43.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Uroševi... |
| CVE-2022-44543 | MEDIUM | 5.3 | 0.6% | Dec 12, 2023 | The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users... |
| CVE-2022-46141 | MEDIUM | 5.5 | 0.1% | Dec 12, 2023 | A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulne... |
| CVE-2022-42784 | MEDIUM | 6.8 | 0.2% | Dec 12, 2023 | A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1... |
| CVE-2022-48614 | MEDIUM | 6.1 | 0.4% | Dec 10, 2023 | Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS. |
| CVE-2022-45362 | MEDIUM | 6.5 | 38.9% | Dec 7, 2023 | Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway... |
| CVE-2022-24403 | MEDIUM | 4.3 | 0.1% | Dec 5, 2023 | The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 net... |
| CVE-2022-48464 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial ... |
| CVE-2022-48463 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial ... |
| CVE-2022-48462 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial ... |
| CVE-2022-4957 | MEDIUM | 6.1 | 0.6% | Dec 3, 2023 | A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vul... |
| CVE-2022-44011 | MEDIUM | 6.5 | 0.7% | Nov 23, 2023 | An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could ca... |
| CVE-2022-36777 | MEDIUM | 6.5 | 0.6% | Nov 22, 2023 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.16.0co... |
| CVE-2022-46647 | MEDIUM | 5.5 | 0.2% | Nov 14, 2023 | Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to poten... |
| CVE-2022-46646 | MEDIUM | 5.5 | 0.2% | Nov 14, 2023 | Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated use... |
| CVE-2022-46301 | MEDIUM | 4.4 | 0.2% | Nov 14, 2023 | Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of servi... |
| CVE-2022-46299 | MEDIUM | 5.5 | 0.2% | Nov 14, 2023 | Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enabl... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now