2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20264 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due ... |
| CVE-2022-4575 | MEDIUM | 6.7 | 0.2% | Oct 30, 2023 | A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models cou... |
| CVE-2022-4574 | MEDIUM | 6.7 | 0.2% | Oct 30, 2023 | An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local ac... |
| CVE-2022-4573 | MEDIUM | 6.7 | 0.2% | Oct 30, 2023 | An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access a... |
| CVE-2022-48189 | MEDIUM | 6.7 | 0.2% | Oct 30, 2023 | An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local acce... |
| CVE-2022-34834 | MEDIUM | 4.8 | 0.4% | Oct 27, 2023 | An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment... |
| CVE-2022-34833 | MEDIUM | 5.4 | 0.4% | Oct 27, 2023 | An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component. |
| CVE-2022-34832 | MEDIUM | 6.5 | 0.7% | Oct 27, 2023 | An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component. |
| CVE-2022-3700 | MEDIUM | 6.3 | 0.1% | Oct 27, 2023 | A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.... |
| CVE-2022-3681 | MEDIUM | 6.5 | 0.2% | Oct 27, 2023 | A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range o... |
| CVE-2022-3429 | MEDIUM | 6.5 | 0.5% | Oct 27, 2023 | A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malform... |
| CVE-2022-34887 | MEDIUM | 5.4 | 0.3% | Oct 27, 2023 | Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers with... |
| CVE-2022-4886 | MEDIUM | 6.5 | 1.6% | Oct 25, 2023 | Ingress-nginx `path` sanitization can be bypassed with `log_format` directive. |
| CVE-2022-3698 | MEDIUM | 4.4 | 0.2% | Oct 25, 2023 | A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Len... |
| CVE-2022-38485 | MEDIUM | 6.5 | 3.1% | Oct 25, 2023 | A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosu... |
| CVE-2022-0353 | MEDIUM | 4.4 | 0.2% | Oct 25, 2023 | A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Len... |
| CVE-2022-4943 | MEDIUM | 5.3 | 0.5% | Oct 20, 2023 | The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capabi... |
| CVE-2022-3622 | MEDIUM | 4.1 | 0.6% | Oct 20, 2023 | The Blog2Social plugin for WordPress is vulnerable to authorization bypass due to missing capability checks in versions... |
| CVE-2022-4954 | MEDIUM | 4.8 | 0.3% | Oct 20, 2023 | The Waiting: One-click countdowns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown na... |
| CVE-2022-4712 | MEDIUM | 6.1 | 0.5% | Oct 20, 2023 | The WP Cerber Security plugin for WordPress is vulnerable to stored cross-site scripting via the log parameter when logg... |
| CVE-2022-25332 | MEDIUM | 4.1 | 0.1% | Oct 19, 2023 | The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing ... |
| CVE-2022-24400 | MEDIUM | 5.9 | 0.3% | Oct 19, 2023 | A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set sess... |
| CVE-2022-3761 | MEDIUM | 5.9 | 0.7% | Oct 17, 2023 | OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-mid... |
| CVE-2022-43892 | MEDIUM | 5.3 | 0.3% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could d... |
| CVE-2022-43891 | MEDIUM | 5.3 | 0.5% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a det... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now