2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26094 | CRITICAL | 9.8 | 0.5% | Apr 11, 2022 | Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allow... |
| CVE-2022-26093 | CRITICAL | 9.8 | 0.5% | Apr 11, 2022 | Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allow... |
| CVE-2022-26092 | HIGH | 7.8 | 0.1% | Apr 11, 2022 | Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution. |
| CVE-2022-26091 | MEDIUM | 6.8 | 0.1% | Apr 11, 2022 | Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can ... |
| CVE-2022-26090 | LOW | 3.3 | 0.1% | Apr 11, 2022 | Improper access control vulnerability in SamsungContacts prior to SMR Apr-2022 Release 1 allows that attackers can acces... |
| CVE-2022-25833 | LOW | 3.3 | 0.1% | Apr 11, 2022 | Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEG... |
| CVE-2022-25832 | MEDIUM | 6.8 | 0.1% | Apr 11, 2022 | Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locke... |
| CVE-2022-25831 | MEDIUM | 4.6 | 0.1% | Apr 11, 2022 | Improper access control vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to access se... |
| CVE-2022-25796 | HIGH | 7.8 | 1.0% | Apr 11, 2022 | A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks ... |
| CVE-2022-25794 | HIGH | 7.8 | 1.1% | Apr 11, 2022 | An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through ma... |
| CVE-2022-25792 | HIGH | 7.8 | 1.4% | Apr 11, 2022 | A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to wr... |
| CVE-2022-25791 | HIGH | 7.8 | 0.6% | Apr 11, 2022 | A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Naviswo... |
| CVE-2022-25790 | HIGH | 7.8 | 1.4% | Apr 11, 2022 | A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to wr... |
| CVE-2022-25789 | HIGH | 7.8 | 1.5% | Apr 11, 2022 | A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-afte... |
| CVE-2022-25615 | MEDIUM | 4.3 | 0.4% | Apr 11, 2022 | Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.8 allows c... |
| CVE-2022-25614 | MEDIUM | 4.3 | 0.4% | Apr 11, 2022 | Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 allows a... |
| CVE-2022-24829 | CRITICAL | 9.8 | 1.1% | Apr 11, 2022 | Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints... |
| CVE-2022-24815 | HIGH | 8.1 | 1.3% | Apr 11, 2022 | JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice archite... |
| CVE-2022-24804 | MEDIUM | 5.3 | 0.8% | Apr 11, 2022 | Discourse is an open source platform for community discussion. In stable versions prior to 2.8.3 and beta versions prior... |
| CVE-2022-22964 | HIGH | 7.8 | 0.2% | Apr 11, 2022 | VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to r... |
| CVE-2022-22962 | HIGH | 7.8 | 0.3% | Apr 11, 2022 | VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the def... |
| CVE-2022-22954 | CRITICAL | 9.8 | 100.0% | Apr 11, 2022 | VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa... |
| CVE-2022-22572 | HIGH | 8.8 | 2.4% | Apr 11, 2022 | A non-admin user with user management permission can escalate his privilege to admin user via password reset functionali... |
| CVE-2022-22571 | MEDIUM | 4.8 | 1.1% | Apr 11, 2022 | An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic conn... |
| CVE-2022-22258 | CRITICAL | 9.8 | 0.9% | Apr 11, 2022 | The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-p... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now