2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-27547 | HIGH | 7.4 | 0.4% | Aug 29, 2022 | HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to tr... |
| CVE-2022-36200 | HIGH | 7.5 | 1.8% | Aug 29, 2022 | In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed. |
| CVE-2022-2961 | HIGH | 7 | 0.3% | Aug 29, 2022 | A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition... |
| CVE-2022-1199 | HIGH | 7.5 | 2.0% | Aug 29, 2022 | A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio... |
| CVE-2022-1117 | HIGH | 8.4 | 0.3% | Aug 29, 2022 | A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime lin... |
| CVE-2022-1043 | HIGH | 8.8 | 3.7% | Aug 29, 2022 | A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to cor... |
| CVE-2022-0934 | HIGH | 7.5 | 1.4% | Aug 29, 2022 | A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a cr... |
| CVE-2022-0850 | HIGH | 7.1 | 0.4% | Aug 29, 2022 | A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace. |
| CVE-2022-0497 | HIGH | 7.1 | 0.4% | Aug 29, 2022 | A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read dur... |
| CVE-2022-0400 | HIGH | 7.5 | 1.2% | Aug 29, 2022 | An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos. |
| CVE-2022-0367 | HIGH | 7.8 | 0.4% | Aug 29, 2022 | A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. |
| CVE-2022-0358 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly relat... |
| CVE-2022-0336 | HIGH | 8.8 | 1.3% | Aug 29, 2022 | The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not ali... |
| CVE-2022-0284 | HIGH | 7.1 | 0.6% | Aug 29, 2022 | A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulne... |
| CVE-2022-36690 | HIGH | 8.8 | 0.8% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at... |
| CVE-2022-36689 | HIGH | 8.8 | 0.8% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter... |
| CVE-2022-36688 | HIGH | 8.8 | 0.8% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter... |
| CVE-2022-36686 | HIGH | 8.8 | 0.8% | Aug 29, 2022 | Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter... |
| CVE-2022-3019 | HIGH | 8.8 | 0.7% | Aug 29, 2022 | The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that w... |
| CVE-2022-38511 | HIGH | 7.8 | 1.4% | Aug 29, 2022 | TOTOLINK A810R V5.9c.4050_B20190424 was discovered to contain a command injection vulnerability via the component downlo... |
| CVE-2022-38510 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | Tenda_TX9pro V22.03.02.10 was discovered to contain a buffer overflow via the component httpd/SetNetControlList. |
| CVE-2022-36616 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcoded password for root ... |
| CVE-2022-36615 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | TOTOLINK A3000RU V4.1.2cu.5185_B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample. |
| CVE-2022-36614 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample. |
| CVE-2022-36613 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now