2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3167 | HIGH | 8.8 | 0.9% | Sep 8, 2022 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1. |
| CVE-2022-38258 | HIGH | 8.1 | 1.1% | Sep 8, 2022 | A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) o... |
| CVE-2022-36093 | HIGH | 7.1 | 0.7% | Sep 8, 2022 | XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. By passing a template of the dis... |
| CVE-2022-36092 | HIGH | 7.5 | 0.8% | Sep 8, 2022 | XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Prior to versions 14.2 and 13.10.... |
| CVE-2022-38260 | HIGH | 7.2 | 0.8% | Sep 8, 2022 | Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/de... |
| CVE-2022-38255 | HIGH | 7.2 | 0.8% | Sep 8, 2022 | Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /interv... |
| CVE-2022-37857 | HIGH | 7.5 | 0.4% | Sep 8, 2022 | bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but sto... |
| CVE-2022-36091 | HIGH | 7.5 | 0.7% | Sep 8, 2022 | XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. Through the suggestion feature, ... |
| CVE-2022-36090 | HIGH | 8.1 | 0.9% | Sep 8, 2022 | XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Prior to versions 13.1.0.5 and 14... |
| CVE-2022-20696 | HIGH | 8.8 | 0.3% | Sep 8, 2022 | A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated,... |
| CVE-2022-30079 | HIGH | 8.8 | 24.4% | Sep 8, 2022 | Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/a... |
| CVE-2022-38094 | HIGH | 8.8 | 1.5% | Sep 8, 2022 | OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 al... |
| CVE-2022-36403 | HIGH | 7.8 | 0.2% | Sep 8, 2022 | Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker... |
| CVE-2022-35273 | HIGH | 8.8 | 1.5% | Sep 8, 2022 | OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allow... |
| CVE-2022-34869 | HIGH | 8.8 | 0.9% | Sep 8, 2022 | Undocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2 firmware versions prior... |
| CVE-2022-28220 | HIGH | 7.5 | 1.7% | Sep 8, 2022 | Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS com... |
| CVE-2022-25897 | HIGH | 7.5 | 1.0% | Sep 8, 2022 | The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limita... |
| CVE-2022-37145 | HIGH | 7.5 | 0.9% | Sep 8, 2022 | The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configure... |
| CVE-2022-37144 | HIGH | 8.8 | 0.8% | Sep 8, 2022 | The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthent... |
| CVE-2022-38531 | HIGH | 8.8 | 1.8% | Sep 8, 2022 | FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function. |
| CVE-2022-37779 | HIGH | 7.2 | 1.7% | Sep 8, 2022 | Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command exe... |
| CVE-2022-37778 | HIGH | 7.2 | 1.7% | Sep 8, 2022 | Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command exe... |
| CVE-2022-37777 | HIGH | 7.2 | 1.7% | Sep 8, 2022 | Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote ... |
| CVE-2022-36081 | HIGH | 7.5 | 0.8% | Sep 7, 2022 | Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, Wikmd is vulnerable to path traversal when access... |
| CVE-2022-36079 | HIGH | 7.5 | 1.0% | Sep 7, 2022 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Internal fields ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now