2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20227 | MEDIUM | 5.5 | 0.1% | Jul 13, 2022 | In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informatio... |
| CVE-2022-20226 | LOW | 3.9 | 0.1% | Jul 13, 2022 | In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. Th... |
| CVE-2022-20225 | MEDIUM | 5.5 | 0.1% | Jul 13, 2022 | In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a m... |
| CVE-2022-20224 | HIGH | 7.5 | 1.0% | Jul 13, 2022 | In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This co... |
| CVE-2022-20223 | HIGH | 7.8 | 0.2% | Jul 13, 2022 | In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call withou... |
| CVE-2022-20222 | CRITICAL | 9.8 | 0.9% | Jul 13, 2022 | In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead... |
| CVE-2022-20221 | MEDIUM | 6.5 | 0.2% | Jul 13, 2022 | In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation... |
| CVE-2022-20220 | HIGH | 7.8 | 0.2% | Jul 13, 2022 | In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lea... |
| CVE-2022-20219 | MEDIUM | 5.5 | 0.1% | Jul 13, 2022 | In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user's... |
| CVE-2022-20218 | HIGH | 7.8 | 0.1% | Jul 13, 2022 | In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic err... |
| CVE-2022-20217 | MEDIUM | 6.5 | 0.3% | Jul 13, 2022 | There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn cont... |
| CVE-2022-20216 | CRITICAL | 9.8 | 0.5% | Jul 13, 2022 | android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com.... |
| CVE-2022-20212 | HIGH | 7.8 | 0.1% | Jul 13, 2022 | In wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. Th... |
| CVE-2022-28888 | CRITICAL | 9.8 | 3.6% | Jul 13, 2022 | Spryker Commerce OS 1.4.2 allows Remote Command Execution. |
| CVE-2022-34358 | MEDIUM | 5.4 | 0.4% | Jul 13, 2022 | IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J... |
| CVE-2022-32096 | HIGH | 7.5 | 1.0% | Jul 13, 2022 | Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulne... |
| CVE-2022-32074 | MEDIUM | 5.4 | 1.4% | Jul 13, 2022 | A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-F... |
| CVE-2022-32073 | CRITICAL | 9.8 | 1.5% | Jul 13, 2022 | WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR. |
| CVE-2022-32065 | MEDIUM | 5.4 | 0.7% | Jul 13, 2022 | An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to... |
| CVE-2022-32274 | MEDIUM | 5.4 | 0.5% | Jul 13, 2022 | The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation fun... |
| CVE-2022-31781 | HIGH | 7.5 | 1.7% | Jul 13, 2022 | Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles ... |
| CVE-2022-35628 | CRITICAL | 9.8 | 25.8% | Jul 12, 2022 | A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3. |
| CVE-2022-33678 | HIGH | 7.2 | 1.8% | Jul 12, 2022 | Azure Site Recovery Remote Code Execution Vulnerability |
| CVE-2022-33677 | HIGH | 7.2 | 1.8% | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability |
| CVE-2022-33676 | HIGH | 7.2 | 1.8% | Jul 12, 2022 | Azure Site Recovery Remote Code Execution Vulnerability |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now