2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-36265HIGH7.2In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a re...
CVE-2022-35488HIGH7.5In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby ...
CVE-2022-35487HIGH7.5Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment...
CVE-2022-2367HIGH7.5The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, t...
CVE-2022-2357HIGH7.5The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download...
CVE-2022-2356HIGH8.8The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upl...
CVE-2022-2704HIGH7.5A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerab...
CVE-2022-2703HIGH8.8A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an u...
CVE-2022-2700HIGH8.8A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown p...
CVE-2022-2699HIGH7.5A vulnerability was found in SourceCodester Simple E-Learning System. It has been rated as critical. Affected by this is...
CVE-2022-2697HIGH7.5A vulnerability was found in SourceCodester Simple E-Learning System. It has been classified as critical. Affected is an...
CVE-2022-26979HIGH7.5Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for ...
CVE-2022-27944HIGH7.5Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference.
CVE-2022-37451HIGH7.5Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_mall...
CVE-2022-2694HIGH8.8A vulnerability was found in SourceCodester Company Website CMS and classified as critical. This issue affects some unkn...
CVE-2022-2693HIGH8.8A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vuln...
CVE-2022-32543HIGH7.8An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE fi...
CVE-2022-29886HIGH7.8An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE fi...
CVE-2022-27660HIGH7.5A denial of service vulnerability exists in the confctl_set_guest_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_0...
CVE-2022-27633HIGH7.5An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G...
CVE-2022-27630HIGH7.5An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS...
CVE-2022-27185HIGH7.5A denial of service vulnerability exists in the confctl_set_master_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_0...
CVE-2022-24023HIGH8.8A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A speci...
CVE-2022-21201HIGH8.8A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh ...
CVE-2022-31614HIGH7.8NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some res...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now