2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39201 | HIGH | 7.5 | 1.2% | Oct 13, 2022 | Grafana is an open source observability and data visualization platform. Starting with version 5.0.0-beta1 and prior to ... |
| CVE-2022-35135 | HIGH | 8.8 | 0.8% | Oct 13, 2022 | Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<... |
| CVE-2022-34022 | HIGH | 7.2 | 0.8% | Oct 13, 2022 | SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST reque... |
| CVE-2022-31130 | HIGH | 7.5 | 1.0% | Oct 13, 2022 | Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.... |
| CVE-2022-39300 | HIGH | 8.1 | 0.6% | Oct 13, 2022 | node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypa... |
| CVE-2022-35944 | HIGH | 7.2 | 0.9% | Oct 13, 2022 | October is a self-hosted Content Management System (CMS) platform based on the Laravel PHP Framework. This vulnerability... |
| CVE-2022-31123 | HIGH | 7.8 | 0.2% | Oct 13, 2022 | Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerab... |
| CVE-2022-41534 | HIGH | 7.2 | 1.1% | Oct 13, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the co... |
| CVE-2022-41533 | HIGH | 7.2 | 0.9% | Oct 13, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the co... |
| CVE-2022-42161 | HIGH | 8.8 | 2.7% | Oct 13, 2022 | D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN ... |
| CVE-2022-42160 | HIGH | 8.8 | 2.7% | Oct 13, 2022 | D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezon... |
| CVE-2022-42156 | HIGH | 8.8 | 2.7% | Oct 13, 2022 | D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number p... |
| CVE-2022-41485 | HIGH | 7.5 | 0.8% | Oct 13, 2022 | Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function... |
| CVE-2022-41484 | HIGH | 7.5 | 0.7% | Oct 13, 2022 | Tenda AC1900 AP500(US)_V1_180320(Beta) was discovered to contain a buffer overflow in the 0x32384 function. This vulnera... |
| CVE-2022-41483 | HIGH | 7.5 | 0.8% | Oct 13, 2022 | Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x4a12cc function... |
| CVE-2022-41482 | HIGH | 7.5 | 0.7% | Oct 13, 2022 | Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47c5dc function... |
| CVE-2022-41481 | HIGH | 7.5 | 0.8% | Oct 13, 2022 | Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47de1c function... |
| CVE-2022-41480 | HIGH | 7.5 | 0.7% | Oct 13, 2022 | Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x475dc function.... |
| CVE-2022-3492 | HIGH | 8.8 | 0.9% | Oct 13, 2022 | A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerabil... |
| CVE-2022-41489 | HIGH | 8.1 | 0.4% | Oct 13, 2022 | WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send craft... |
| CVE-2022-41475 | HIGH | 8.8 | 0.4% | Oct 13, 2022 | RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an ... |
| CVE-2022-37208 | HIGH | 8.8 | 1.1% | Oct 13, 2022 | JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filter... |
| CVE-2022-42906 | HIGH | 7.8 | 0.4% | Oct 13, 2022 | powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain... |
| CVE-2022-42902 | HIGH | 8.8 | 1.3% | Oct 13, 2022 | In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavata... |
| CVE-2022-42901 | HIGH | 7.8 | 0.3% | Oct 13, 2022 | Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now