2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46184 | — | — | — | Jan 27, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2022-46183 | — | — | — | Jan 27, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2022-46182 | — | — | — | Jan 27, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2022-48073 | HIGH | 7.5 | 0.5% | Jan 27, 2023 | Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext. |
| CVE-2022-48072 | HIGH | 7.8 | 0.9% | Jan 27, 2023 | Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the a... |
| CVE-2022-48071 | HIGH | 7.5 | 0.4% | Jan 27, 2023 | Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. |
| CVE-2022-48070 | HIGH | 7.8 | 0.9% | Jan 27, 2023 | Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the... |
| CVE-2022-48069 | HIGH | 7.5 | 1.4% | Jan 27, 2023 | Totolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter. |
| CVE-2022-48067 | MEDIUM | 5.5 | 0.2% | Jan 27, 2023 | An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via... |
| CVE-2022-48066 | CRITICAL | 9.8 | 1.1% | Jan 27, 2023 | An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a craf... |
| CVE-2022-47632 | MEDIUM | 6.8 | 0.6% | Jan 27, 2023 | Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege ... |
| CVE-2022-44718 | LOW | 3.5 | 0.3% | Jan 27, 2023 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After success... |
| CVE-2022-44717 | LOW | 3.1 | 0.3% | Jan 27, 2023 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After success... |
| CVE-2022-44715 | HIGH | 8.8 | 0.7% | Jan 27, 2023 | Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions v... |
| CVE-2022-44298 | CRITICAL | 9.8 | 0.7% | Jan 27, 2023 | SiteServer CMS 7.1.3 is vulnerable to SQL Injection. |
| CVE-2022-44029 | MEDIUM | 6.1 | 0.4% | Jan 27, 2023 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6... |
| CVE-2022-44028 | MEDIUM | 6.1 | 0.4% | Jan 27, 2023 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5... |
| CVE-2022-44027 | MEDIUM | 6.1 | 0.4% | Jan 27, 2023 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4... |
| CVE-2022-44026 | MEDIUM | 6.1 | 0.4% | Jan 27, 2023 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3... |
| CVE-2022-44025 | MEDIUM | 6.1 | 0.4% | Jan 27, 2023 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2... |
| CVE-2022-44024 | MEDIUM | 6.1 | 0.4% | Jan 27, 2023 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1... |
| CVE-2022-2712 | HIGH | 7.5 | 0.9% | Jan 27, 2023 | In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not fi... |
| CVE-2022-46967 | CRITICAL | 9.8 | 1.1% | Jan 26, 2023 | An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admi... |
| CVE-2022-46966 | CRITICAL | 9.8 | 1.1% | Jan 26, 2023 | Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php. |
| CVE-2022-47951 | MEDIUM | 5.7 | 1.0% | Jan 26, 2023 | An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x be... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now