2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-47467MEDIUM5.5In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47466MEDIUM5.5In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47465MEDIUM5.5In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service.
CVE-2022-47464MEDIUM5.5In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47463MEDIUM5.5In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47362MEDIUM5.5In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47337MEDIUM5.5In media service, there is a missing permission check. This could lead to local denial of service in media service.
CVE-2022-47336MEDIUM5.5In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47335MEDIUM5.5In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-43293MEDIUM5.9Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wac...
CVE-2022-46703MEDIUM5.5A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventu...
CVE-2022-4827MEDIUM5.4The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputt...
CVE-2022-39048MEDIUM6.1A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an atta...
CVE-2022-37462MEDIUM5.4A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse t...
CVE-2022-43309MEDIUM5.5Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.
CVE-2022-43928MEDIUM6.5The IBM Toolbox for Java (Db2 Mirror for i 7.4 and 7.5) could allow a user to obtain sensitive information, caused by ut...
CVE-2022-43914MEDIUM5.4IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb...
CVE-2022-32599MEDIUM6.7In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege ...
CVE-2022-31889MEDIUM6.1Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commi...
CVE-2022-3513MEDIUM6.1An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting fr...
CVE-2022-4940MEDIUM6.5The WCFM Membership plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to...
CVE-2022-48223MEDIUM6.7An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe is called by the Acuan...
CVE-2022-48228MEDIUM5.5An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify an...
CVE-2022-47870MEDIUM6.1A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows r...
CVE-2022-4771MEDIUM6.1 Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malici...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now