2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-44543MEDIUM5.3The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users...
CVE-2022-47375HIGH7.5A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versi...
CVE-2022-47374HIGH7.5A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versi...
CVE-2022-46141MEDIUM5.5A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulne...
CVE-2022-42784MEDIUM6.8A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1...
CVE-2022-48616HIGH7.5A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability...
CVE-2022-48615HIGH7.1An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to...
CVE-2022-48614MEDIUM6.1Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.
CVE-2022-45362MEDIUM6.5Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway...
CVE-2022-24403MEDIUM4.3The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 net...
CVE-2022-47531HIGH8.8An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows au...
CVE-2022-46480HIGH8.1Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firm...
CVE-2022-48464MEDIUM5.5In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial ...
CVE-2022-48463MEDIUM5.5In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial ...
CVE-2022-48462MEDIUM5.5In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial ...
CVE-2022-4957MEDIUM6.1A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vul...
CVE-2022-45135CRITICAL9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This...
CVE-2022-42541CRITICAL9.8Remote code execution
CVE-2022-42540CRITICAL9.8Elevation of privilege
CVE-2022-42539HIGH7.5Information disclosure
CVE-2022-42538CRITICAL9.8Elevation of privilege
CVE-2022-42537CRITICAL9.8Remote code execution
CVE-2022-42536CRITICAL9.8Remote code execution
CVE-2022-41678HIGH8.8Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution.  In details, in ActiveMQ...
CVE-2022-41951CRITICAL9.8OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications ea...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now