2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43469 | HIGH | 8.8 | 0.3% | Feb 14, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Orchestrated Corona Virus (COVID-19) Banner & Live Data plugin <= 1.7... |
| CVE-2022-4138 | HIGH | 8.1 | 0.4% | Feb 13, 2023 | A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all version... |
| CVE-2022-3759 | HIGH | 7.5 | 1.2% | Feb 13, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions start... |
| CVE-2022-48077 | HIGH | 7.8 | 0.3% | Feb 13, 2023 | Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate priv... |
| CVE-2022-41134 | HIGH | 8.8 | 0.3% | Feb 13, 2023 | Cross-Site Request Forgery (CSRF) in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plu... |
| CVE-2022-4745 | HIGH | 7.1 | 0.3% | Feb 13, 2023 | The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod,... |
| CVE-2022-4546 | HIGH | 7.2 | 1.0% | Feb 13, 2023 | The Mapwiz WordPress plugin through 1.0.1 does not properly sanitise and escape a parameter before using it in a SQL sta... |
| CVE-2022-45725 | HIGH | 8.8 | 8.8% | Feb 13, 2023 | Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute ar... |
| CVE-2022-45455 | HIGH | 7.8 | 0.1% | Feb 13, 2023 | Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber ... |
| CVE-2022-45454 | HIGH | 7.5 | 0.3% | Feb 13, 2023 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent ... |
| CVE-2022-43460 | HIGH | 7.5 | 0.5% | Feb 13, 2023 | Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If ... |
| CVE-2022-47361 | HIGH | 7.8 | 0.1% | Feb 12, 2023 | In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system e... |
| CVE-2022-45090 | HIGH | 8.8 | 0.6% | Feb 12, 2023 | Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. T... |
| CVE-2022-45089 | HIGH | 8.8 | 0.6% | Feb 12, 2023 | Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. T... |
| CVE-2022-43779 | HIGH | 7 | 0.1% | Feb 12, 2023 | A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI ... |
| CVE-2022-42292 | HIGH | 7.8 | 0.2% | Feb 12, 2023 | NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator pri... |
| CVE-2022-40513 | HIGH | 7.5 | 0.4% | Feb 12, 2023 | Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state. |
| CVE-2022-40512 | HIGH | 7.5 | 0.4% | Feb 12, 2023 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
| CVE-2022-40502 | HIGH | 7.5 | 0.4% | Feb 12, 2023 | Transient DOS due to improper input validation in WLAN Host. |
| CVE-2022-38396 | HIGH | 7.8 | 0.4% | Feb 12, 2023 | HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions mig... |
| CVE-2022-34146 | HIGH | 7.5 | 0.4% | Feb 12, 2023 | Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation. |
| CVE-2022-34145 | HIGH | 7.5 | 0.4% | Feb 12, 2023 | Transient DOS due to buffer over-read in WLAN Host while parsing frame information. |
| CVE-2022-33306 | HIGH | 7.5 | 0.4% | Feb 12, 2023 | Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. |
| CVE-2022-33280 | HIGH | 8.8 | 0.3% | Feb 12, 2023 | Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet. |
| CVE-2022-33277 | HIGH | 7.8 | 0.1% | Feb 12, 2023 | Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now