2022 CVE Vulnerabilities
27,526 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26998 | CRITICAL | 9.8 | 3.5% | Mar 15, 2022 | Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps... |
| CVE-2022-26997 | CRITICAL | 9.8 | 3.5% | Mar 15, 2022 | Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl p... |
| CVE-2022-26996 | CRITICAL | 9.8 | 2.9% | Mar 15, 2022 | Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_use... |
| CVE-2022-26995 | CRITICAL | 9.8 | 2.9% | Mar 15, 2022 | Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function vi... |
| CVE-2022-26994 | CRITICAL | 9.8 | 3.0% | Mar 15, 2022 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman... |
| CVE-2022-26993 | CRITICAL | 9.8 | 2.7% | Mar 15, 2022 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman... |
| CVE-2022-26992 | CRITICAL | 9.8 | 2.9% | Mar 15, 2022 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman... |
| CVE-2022-26991 | CRITICAL | 9.8 | 2.7% | Mar 15, 2022 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman... |
| CVE-2022-26990 | CRITICAL | 9.8 | 2.9% | Mar 15, 2022 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comman... |
| CVE-2022-26214 | CRITICAL | 9.8 | 2.8% | Mar 15, 2022 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137... |
| CVE-2022-26213 | CRITICAL | 9.8 | 25.6% | Mar 15, 2022 | Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the funct... |
| CVE-2022-26212 | CRITICAL | 9.8 | 2.8% | Mar 15, 2022 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137... |
| CVE-2022-26211 | CRITICAL | 9.8 | 2.8% | Mar 15, 2022 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137... |
| CVE-2022-26210 | CRITICAL | 9.8 | 5.7% | Mar 15, 2022 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137... |
| CVE-2022-26209 | CRITICAL | 9.8 | 2.2% | Mar 15, 2022 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137... |
| CVE-2022-26208 | CRITICAL | 9.8 | 2.8% | Mar 15, 2022 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137... |
| CVE-2022-26207 | CRITICAL | 9.8 | 2.2% | Mar 15, 2022 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137... |
| CVE-2022-26206 | CRITICAL | 9.8 | 2.2% | Mar 15, 2022 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137... |
| CVE-2022-25498 | CRITICAL | 9.8 | 2.9% | Mar 15, 2022 | CuppaCMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the saveConfigData function in /... |
| CVE-2022-25495 | CRITICAL | 9.8 | 2.0% | Mar 15, 2022 | The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and e... |
| CVE-2022-25494 | CRITICAL | 9.8 | 1.1% | Mar 15, 2022 | Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via staff_login.php. |
| CVE-2022-25492 | CRITICAL | 9.8 | 1.6% | Mar 15, 2022 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php. |
| CVE-2022-25490 | CRITICAL | 9.8 | 1.6% | Mar 15, 2022 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php. |
| CVE-2022-25488 | CRITICAL | 9.8 | 7.1% | Mar 15, 2022 | Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. |
| CVE-2022-25487 | CRITICAL | 9.8 | 54.8% | Mar 15, 2022 | Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now