2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2465 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted... |
| CVE-2022-2464 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability... |
| CVE-2022-2463 | HIGH | 7.8 | 2.6% | Aug 25, 2022 | Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability... |
| CVE-2022-2255 | HIGH | 7.5 | 0.7% | Aug 25, 2022 | A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, all... |
| CVE-2022-2031 | HIGH | 8.8 | 1.0% | Aug 25, 2022 | A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and... |
| CVE-2022-0135 | HIGH | 7.8 | 0.4% | Aug 25, 2022 | An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a maliciou... |
| CVE-2022-37824 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWif... |
| CVE-2022-37823 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetVirtualSe... |
| CVE-2022-37822 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetRouteStatic. |
| CVE-2022-37821 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ProvinceCode parameter in the function formSetP... |
| CVE-2022-37820 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ddnsEn parameter in the function formSetSysTool... |
| CVE-2022-37819 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTi... |
| CVE-2022-37818 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. |
| CVE-2022-37817 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind. |
| CVE-2022-37084 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffe... |
| CVE-2022-37083 | HIGH | 7.8 | 1.1% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter ... |
| CVE-2022-37082 | HIGH | 7.8 | 1.1% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time par... |
| CVE-2022-37081 | HIGH | 7.8 | 1.1% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command param... |
| CVE-2022-37080 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/s... |
| CVE-2022-37079 | HIGH | 7.8 | 1.3% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName para... |
| CVE-2022-37078 | HIGH | 7.8 | 0.9% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang paramete... |
| CVE-2022-37077 | HIGH | 7.8 | 0.3% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter. |
| CVE-2022-36455 | HIGH | 7.8 | 1.1% | Aug 25, 2022 | TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username par... |
| CVE-2022-22728 | HIGH | 7.5 | 4.7% | Aug 25, 2022 | A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploa... |
| CVE-2022-37076 | HIGH | 7.8 | 1.1% | Aug 25, 2022 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName para... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now