2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-35857 | CRITICAL | 9.8 | 1.4% | Jul 13, 2022 | kvf-admin through 2022-02-12 allows remote attackers to execute arbitrary code because deserialization is mishandled. Th... |
| CVE-2022-34765 | MEDIUM | 5.3 | 0.5% | Jul 13, 2022 | A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware i... |
| CVE-2022-34764 | HIGH | 7.5 | 0.6% | Jul 13, 2022 | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause... |
| CVE-2022-34763 | HIGH | 7.5 | 0.3% | Jul 13, 2022 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized ... |
| CVE-2022-34762 | HIGH | 7.5 | 0.6% | Jul 13, 2022 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could... |
| CVE-2022-34761 | HIGH | 7.5 | 0.8% | Jul 13, 2022 | A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when pars... |
| CVE-2022-34760 | HIGH | 7.5 | 0.7% | Jul 13, 2022 | A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of serv... |
| CVE-2022-34759 | HIGH | 7.5 | 0.7% | Jul 13, 2022 | A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to imprope... |
| CVE-2022-34758 | MEDIUM | 4.9 | 0.4% | Jul 13, 2022 | A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if... |
| CVE-2022-34757 | MEDIUM | 5.3 | 0.3% | Jul 13, 2022 | A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used fo... |
| CVE-2022-34756 | CRITICAL | 9.8 | 1.3% | Jul 13, 2022 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or... |
| CVE-2022-34754 | MEDIUM | 6.8 | 0.3% | Jul 13, 2022 | A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing cred... |
| CVE-2022-34753 | HIGH | 8.8 | 71.1% | Jul 13, 2022 | A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exist... |
| CVE-2022-32117 | HIGH | 7.8 | 0.3% | Jul 13, 2022 | Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryx_print_unhandled_exception i... |
| CVE-2022-32114 | HIGH | 8.8 | 1.6% | Jul 13, 2022 | An unrestricted file upload vulnerability in the Add New Assets function of Strapi 4.1.12 allows attackers to conduct XS... |
| CVE-2022-31145 | MEDIUM | 6.5 | 0.8% | Jul 13, 2022 | FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In ve... |
| CVE-2022-32308 | MEDIUM | 6.1 | 0.5% | Jul 13, 2022 | Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitra... |
| CVE-2022-2380 | MEDIUM | 5.5 | 0.2% | Jul 13, 2022 | The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() fun... |
| CVE-2022-22982 | HIGH | 7.5 | 0.8% | Jul 13, 2022 | The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to... |
| CVE-2022-20238 | CRITICAL | 9.8 | 0.5% | Jul 13, 2022 | 'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->v... |
| CVE-2022-20236 | HIGH | 7.5 | 0.4% | Jul 13, 2022 | A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233... |
| CVE-2022-20234 | HIGH | 7.5 | 0.3% | Jul 13, 2022 | In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, ... |
| CVE-2022-20230 | MEDIUM | 5.5 | 0.1% | Jul 13, 2022 | In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input va... |
| CVE-2022-20229 | CRITICAL | 9.8 | 2.1% | Jul 13, 2022 | In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing ... |
| CVE-2022-20228 | MEDIUM | 6.5 | 0.5% | Jul 13, 2022 | In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now