2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-50975HIGH8.8An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the...
CVE-2022-50950HIGH7.1Webile 1.0.1 contains a directory traversal vulnerability that allows remote attackers to manipulate file system paths w...
CVE-2022-40620HIGH7.7FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS ce...
CVE-2022-40619HIGH7.7FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the L...
CVE-2022-50939HIGH8.6e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators to overrid...
CVE-2022-50938HIGH8.5CONTPAQi AdminPAQ 14.0.0 contains an unquoted service path vulnerability in the AppKeyLicenseServer service running with...
CVE-2022-50936HIGH8.8WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload mal...
CVE-2022-50933HIGH8.5Cain & Abel 4.9.56 contains an unquoted service path vulnerability that allows local attackers to potentially execute ar...
CVE-2022-50932HIGH8.7Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attack...
CVE-2022-50931HIGH8.5TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable fi...
CVE-2022-50930HIGH8.5Emerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows ...
CVE-2022-50929HIGH8.5Connectify Hotspot 2018 contains an unquoted service path vulnerability in its ConnectifyService executable that allows ...
CVE-2022-50928HIGH8.5BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows lo...
CVE-2022-50927HIGH8.5Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo p...
CVE-2022-50924HIGH8.5Private Internet Access 3.3 contains an unquoted service path vulnerability that allows local users to potentially execu...
CVE-2022-50923HIGH8.5Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with...
CVE-2022-50921HIGH8.5WOW21 5.0.1.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitra...
CVE-2022-50920HIGH8.5Sandboxie-Plus 5.50.2 contains an unquoted service path vulnerability in the SbieSvc Windows service that allows local a...
CVE-2022-50918HIGH8.5VIVE Runtime Service 1.0.0.4 contains an unquoted service path vulnerability that allows local users to execute arbitrar...
CVE-2022-50917HIGH8.5ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows loca...
CVE-2022-50916HIGH8.7e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server ...
CVE-2022-50915HIGH8.5PTPublisher 2.3.4 contains an unquoted service path vulnerability in the PTProtect service that allows local attackers t...
CVE-2022-50914HIGH8.5EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. A...
CVE-2022-50913HIGH8.5ITeC ITeCProteccioAppServer contains an unquoted service path vulnerability that allows local attackers to execute code ...
CVE-2022-50909HIGH8.8Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now