2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-40179HIGH8.1A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < ...
CVE-2022-40176HIGH8A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < ...
CVE-2022-40147HIGH7.4A vulnerability has been identified in Industrial Edge Management (All versions < V1.5.1). The affected software does no...
CVE-2022-38465HIGH7.8A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Co...
CVE-2022-38371HIGH7.5A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver...
CVE-2022-37864HIGH7.8A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out o...
CVE-2022-36362HIGH7.5A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08...
CVE-2022-36360HIGH7.5A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load f...
CVE-2022-31766HIGH8.6A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDC...
CVE-2022-31765HIGH8.8Affected devices do not properly authorize the change password function of the web interface. This could allow low priv...
CVE-2022-41749HIGH7.8An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privile...
CVE-2022-41747HIGH7.8An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a...
CVE-2022-41745HIGH7An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted...
CVE-2022-41744HIGH7A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component coul...
CVE-2022-3154HIGH7.1The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before ...
CVE-2022-39288HIGH7.5fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of s...
CVE-2022-34425HIGH7.5Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote atta...
CVE-2022-20920HIGH7.7A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, ...
CVE-2022-20915HIGH7.4A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Softw...
CVE-2022-20870HIGH8.6A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst...
CVE-2022-20837HIGH8.6A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NA...
CVE-2022-39292HIGH7.5Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitiv...
CVE-2022-42725HIGH7.5Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
CVE-2022-3436HIGH7.5A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by t...
CVE-2022-36635HIGH8.8ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now