2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-0811HIGH8.8A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a p...
CVE-2022-24751HIGH7.4Zulip is an open source group chat application. Starting with version 4.0 and prior to version 4.11, Zulip is vulnerable...
CVE-2022-0986MEDIUM6.1Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11.
CVE-2022-0705MEDIUM5.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
CVE-2022-21946MEDIUM5.3A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUS...
CVE-2022-21945MEDIUM6.1A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen a...
CVE-2022-0704MEDIUM5.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
CVE-2022-0911MEDIUM5.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
CVE-2022-27225MEDIUM6.5Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It uses Keycloak for identit...
CVE-2022-27223HIGH8.8In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might...
CVE-2022-27005CRITICAL9.8Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command ...
CVE-2022-27004CRITICAL9.8Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command ...
CVE-2022-27003CRITICAL9.8Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command ...
CVE-2022-27002CRITICAL9.8Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name...
CVE-2022-27001CRITICAL9.8Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname ...
CVE-2022-27000CRITICAL9.8Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via ...
CVE-2022-26999CRITICAL9.8Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via ...
CVE-2022-26998CRITICAL9.8Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps...
CVE-2022-26997CRITICAL9.8Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl p...
CVE-2022-26996CRITICAL9.8Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_use...
CVE-2022-26995CRITICAL9.8Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function vi...
CVE-2022-26994CRITICAL9.8Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman...
CVE-2022-26993CRITICAL9.8Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman...
CVE-2022-26992CRITICAL9.8Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman...
CVE-2022-26991CRITICAL9.8Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now