2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-48439MEDIUM4.4In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia...
CVE-2022-48438MEDIUM4.4In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia...
CVE-2022-48391MEDIUM5.5In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a...
CVE-2022-4946MEDIUM5.4The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode...
CVE-2022-24695MEDIUM4.3Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth...
CVE-2022-4332MEDIUM6.8In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Th...
CVE-2022-35759MEDIUM6.5Windows Local Security Authority (LSA) Denial of Service Vulnerability
CVE-2022-35758MEDIUM5.5Windows Kernel Memory Information Disclosure Vulnerability
CVE-2022-35754MEDIUM6.7Unified Write Filter Elevation of Privilege Vulnerability
CVE-2022-35747MEDIUM5.9Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
CVE-2022-47028MEDIUM5.5An issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of service via arbitary da...
CVE-2022-36249MEDIUM5.4Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Contr...
CVE-2022-36244MEDIUM5.4Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripti...
CVE-2022-36243MEDIUM5.3Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server...
CVE-2022-46361MEDIUM6.8An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious ...
CVE-2022-43485MEDIUM6.5 Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claim...
CVE-2022-45853MEDIUM6.7The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmwar...
CVE-2022-4676MEDIUM5.4The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow u...
CVE-2022-41766MEDIUM4.3An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an a...
CVE-2022-24632MEDIUM5.3An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during f...
CVE-2022-24631MEDIUM5.4An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is stored XSS via the ajaxTenan...
CVE-2022-46945MEDIUM6.5Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagV...
CVE-2022-39374MEDIUM6.5Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malici...
CVE-2022-39335MEDIUM5Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix Federation A...
CVE-2022-45366MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin <= 5.0....

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now