2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41547 | HIGH | 7.5 | 1.2% | Oct 18, 2022 | Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability ... |
| CVE-2022-41541 | HIGH | 8.1 | 1.1% | Oct 18, 2022 | TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authent... |
| CVE-2022-41537 | HIGH | 7.2 | 1.1% | Oct 18, 2022 | Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the c... |
| CVE-2022-29055 | HIGH | 7.5 | 0.9% | Oct 18, 2022 | A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 thr... |
| CVE-2022-41504 | HIGH | 7.2 | 1.0% | Oct 18, 2022 | An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 ... |
| CVE-2022-41479 | HIGH | 7.5 | 1.1% | Oct 18, 2022 | The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify th... |
| CVE-2022-35844 | HIGH | 7.2 | 0.3% | Oct 18, 2022 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface ... |
| CVE-2022-36438 | HIGH | 7.8 | 0.2% | Oct 18, 2022 | AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escal... |
| CVE-2022-3584 | HIGH | 8.8 | 0.7% | Oct 18, 2022 | A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue aff... |
| CVE-2022-31122 | HIGH | 8.1 | 0.6% | Oct 18, 2022 | Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to ... |
| CVE-2022-39058 | HIGH | 7.5 | 1.7% | Oct 18, 2022 | RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit ... |
| CVE-2022-39057 | HIGH | 7.2 | 0.7% | Oct 18, 2022 | RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remot... |
| CVE-2022-22251 | HIGH | 7.8 | 0.2% | Oct 18, 2022 | On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing pas... |
| CVE-2022-22248 | HIGH | 7.3 | 0.2% | Oct 18, 2022 | An Incorrect Permission Assignment vulnerability in shell processing of Juniper Networks Junos OS Evolved allows a low-p... |
| CVE-2022-22247 | HIGH | 7.5 | 0.6% | Oct 18, 2022 | An Improper Input Validation vulnerability in ingress TCP segment processing of Juniper Networks Junos OS Evolved allows... |
| CVE-2022-22246 | HIGH | 8.8 | 0.6% | Oct 18, 2022 | A PHP Local File Inclusion (LFI) vulnerability in the J-Web component of Juniper Networks Junos OS may allow a low-privi... |
| CVE-2022-22239 | HIGH | 8.8 | 0.2% | Oct 18, 2022 | An Execution with Unnecessary Privileges vulnerability in Management Daemon (mgd) of Juniper Networks Junos OS Evolved a... |
| CVE-2022-22236 | HIGH | 7.5 | 0.6% | Oct 18, 2022 | An Access of Uninitialized Pointer vulnerability in SIP Application Layer Gateway (ALG) of Juniper Networks Junos OS on ... |
| CVE-2022-22235 | HIGH | 7.5 | 0.6% | Oct 18, 2022 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N... |
| CVE-2022-22232 | HIGH | 7.5 | 0.6% | Oct 18, 2022 | A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS on SRX Series allo... |
| CVE-2022-22231 | HIGH | 7.5 | 0.6% | Oct 18, 2022 | An Unchecked Return Value to NULL Pointer Dereference vulnerability in Packet Forwarding Engine (PFE) of Juniper Network... |
| CVE-2022-22229 | HIGH | 8.4 | 0.7% | Oct 18, 2022 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, a stored XSS (or ... |
| CVE-2022-22228 | HIGH | 7.5 | 0.6% | Oct 18, 2022 | An Improper Validation of Specified Type of Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks... |
| CVE-2022-22223 | HIGH | 7.5 | 0.8% | Oct 18, 2022 | On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping (P... |
| CVE-2022-22218 | HIGH | 7.5 | 0.4% | Oct 18, 2022 | On SRX Series devices, an Improper Check for Unusual or Exceptional Conditions when using Certificate Management Protoco... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now