2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36612 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | TOTOLINK A950RG V4.1.2cu.5204_B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample. |
| CVE-2022-36611 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample. |
| CVE-2022-36610 | HIGH | 7.8 | 0.3% | Aug 29, 2022 | TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample. |
| CVE-2022-36704 | HIGH | 8.8 | 0.8% | Aug 28, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /libraria... |
| CVE-2022-38571 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem. |
| CVE-2022-38570 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability ... |
| CVE-2022-38569 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd. |
| CVE-2022-38568 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools.... |
| CVE-2022-38567 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. T... |
| CVE-2022-38566 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. T... |
| CVE-2022-38565 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. T... |
| CVE-2022-38564 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. T... |
| CVE-2022-38563 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools.... |
| CVE-2022-38562 | HIGH | 7.5 | 0.8% | Aug 28, 2022 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools.... |
| CVE-2022-3016 | HIGH | 7.8 | 0.5% | Aug 28, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0286. |
| CVE-2022-38794 | HIGH | 7.5 | 3.4% | Aug 27, 2022 | Zaver through 2020-12-15 allows directory traversal via the GET /.. substring. |
| CVE-2022-3012 | HIGH | 8.8 | 0.6% | Aug 27, 2022 | A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue ... |
| CVE-2022-36546 | HIGH | 8.8 | 0.4% | Aug 26, 2022 | Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/setting... |
| CVE-2022-2915 | HIGH | 8.8 | 1.3% | Aug 26, 2022 | A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to c... |
| CVE-2022-36537 | HIGH | 7.5 | 95.3% | Aug 26, 2022 | ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafte... |
| CVE-2022-36529 | HIGH | 8.8 | 0.9% | Aug 26, 2022 | Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at... |
| CVE-2022-31773 | HIGH | 8.8 | 0.3% | Aug 26, 2022 | IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attac... |
| CVE-2022-0217 | HIGH | 7.5 | 4.4% | Aug 26, 2022 | It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML feat... |
| CVE-2022-0084 | HIGH | 7.5 | 1.1% | Aug 26, 2022 | A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a mess... |
| CVE-2022-25625 | HIGH | 8.8 | 0.7% | Aug 26, 2022 | A malicious unauthorized PAM user can access the administration configuration data and change the values. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now