2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38102 | MEDIUM | 4.4 | 0.2% | Aug 11, 2023 | Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45... |
| CVE-2022-38083 | MEDIUM | 4.4 | 0.2% | Aug 11, 2023 | Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena... |
| CVE-2022-37343 | MEDIUM | 6.7 | 0.2% | Aug 11, 2023 | Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena... |
| CVE-2022-37336 | MEDIUM | 6.7 | 0.2% | Aug 11, 2023 | Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escal... |
| CVE-2022-36372 | MEDIUM | 6.7 | 0.2% | Aug 11, 2023 | Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escala... |
| CVE-2022-36351 | MEDIUM | 6.5 | 0.6% | Aug 11, 2023 | Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticate... |
| CVE-2022-34657 | MEDIUM | 4.4 | 0.2% | Aug 11, 2023 | Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user ... |
| CVE-2022-27879 | MEDIUM | 4.4 | 0.2% | Aug 11, 2023 | Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentiall... |
| CVE-2022-27635 | MEDIUM | 6.7 | 0.2% | Aug 11, 2023 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user ... |
| CVE-2022-44629 | MEDIUM | 4.8 | 0.3% | Aug 10, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catalyst Connect Catalyst Connect Zoho CRM Client Port... |
| CVE-2022-27861 | MEDIUM | 6.1 | 0.3% | Aug 10, 2023 | Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin <= 4.7.5 versions. |
| CVE-2022-45821 | MEDIUM | 5.4 | 0.3% | Aug 8, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in NooTheme Noo Timetable plugin <= 2.1.3 versions. |
| CVE-2022-38795 | MEDIUM | 6.5 | 0.5% | Aug 7, 2023 | In Gitea through 1.17.1, repo cloning can occur in the migration function. |
| CVE-2022-47351 | MEDIUM | 4.4 | 0.1% | Aug 7, 2023 | In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial ... |
| CVE-2022-47350 | MEDIUM | 4.4 | 0.1% | Aug 7, 2023 | In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial ... |
| CVE-2022-4955 | MEDIUM | 6.5 | 0.3% | Aug 4, 2023 | Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a use... |
| CVE-2022-41401 | MEDIUM | 6.5 | 1.2% | Aug 4, 2023 | OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to ex... |
| CVE-2022-26838 | MEDIUM | 6.5 | 1.0% | Aug 3, 2023 | Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticate... |
| CVE-2022-2416 | MEDIUM | 4.3 | 0.3% | Aug 2, 2023 | In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enu... |
| CVE-2022-2346 | MEDIUM | 4.3 | 0.3% | Aug 2, 2023 | In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoin... |
| CVE-2022-42182 | MEDIUM | 5.3 | 0.9% | Jul 31, 2023 | Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal. |
| CVE-2022-4888 | MEDIUM | 6.5 | 0.3% | Jul 31, 2023 | The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom... |
| CVE-2022-4926 | MEDIUM | 6.5 | 0.5% | Jul 29, 2023 | Insufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119 allowed a remote attacker... |
| CVE-2022-4925 | MEDIUM | 6.5 | 0.5% | Jul 29, 2023 | Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to p... |
| CVE-2022-4922 | MEDIUM | 6.5 | 0.5% | Jul 29, 2023 | Inappropriate implementation in Blink in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform UI spo... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now