2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44730 | MEDIUM | 4.4 | 0.7% | Aug 22, 2023 | Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affe... |
| CVE-2022-44215 | MEDIUM | 6.1 | 0.8% | Aug 22, 2023 | There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL. |
| CVE-2022-41444 | MEDIUM | 6.1 | 0.6% | Aug 22, 2023 | Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php. |
| CVE-2022-40090 | MEDIUM | 6.5 | 0.8% | Aug 22, 2023 | An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service... |
| CVE-2022-38349 | MEDIUM | 6.5 | 0.9% | Aug 22, 2023 | An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service b... |
| CVE-2022-37052 | MEDIUM | 6.5 | 0.9% | Aug 22, 2023 | A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failur... |
| CVE-2022-37051 | MEDIUM | 6.5 | 1.0% | Aug 22, 2023 | An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main... |
| CVE-2022-37050 | MEDIUM | 6.5 | 0.9% | Aug 22, 2023 | In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes w... |
| CVE-2022-35206 | MEDIUM | 5.5 | 0.3% | Aug 22, 2023 | Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwar... |
| CVE-2022-35205 | MEDIUM | 5.5 | 0.4% | Aug 22, 2023 | An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows ... |
| CVE-2022-29654 | MEDIUM | 5.5 | 0.5% | Aug 22, 2023 | Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial... |
| CVE-2022-4782 | MEDIUM | 5.4 | 0.4% | Aug 16, 2023 | The ClickFunnels WordPress plugin through 3.1.1 does not validate and escape one of its shortcode attributes, which coul... |
| CVE-2022-46725 | MEDIUM | 4.3 | 0.6% | Aug 14, 2023 | A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is... |
| CVE-2022-46722 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to modify ... |
| CVE-2022-26699 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able ... |
| CVE-2022-22655 | MEDIUM | 5.5 | 0.3% | Aug 14, 2023 | An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and... |
| CVE-2022-22646 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious applic... |
| CVE-2022-4953 | MEDIUM | 6.1 | 2.0% | Aug 14, 2023 | The Elementor Website Builder WordPress plugin before 3.5.5 does not filter out user-controlled URLs from being loaded i... |
| CVE-2022-46329 | MEDIUM | 6.7 | 0.3% | Aug 11, 2023 | Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially ... |
| CVE-2022-44612 | MEDIUM | 5.5 | 0.2% | Aug 11, 2023 | Use of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow an authenticated user ... |
| CVE-2022-43505 | MEDIUM | 4.4 | 0.2% | Aug 11, 2023 | Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to po... |
| CVE-2022-41984 | MEDIUM | 4.4 | 0.2% | Aug 11, 2023 | Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October... |
| CVE-2022-41804 | MEDIUM | 6.7 | 0.3% | Aug 11, 2023 | Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged... |
| CVE-2022-40982 | MEDIUM | 6.5 | 3.9% | Aug 11, 2023 | Information exposure through microarchitectural state after transient execution in certain vector execution units for so... |
| CVE-2022-40964 | MEDIUM | 6.7 | 0.2% | Aug 11, 2023 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now