2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-32641MEDIUM6.7In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation ...
CVE-2022-32640MEDIUM6.7In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation...
CVE-2022-32639MEDIUM4.4In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation o...
CVE-2022-32638MEDIUM6.4In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg...
CVE-2022-32637MEDIUM6.7In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat...
CVE-2022-32636MEDIUM6.7In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation o...
CVE-2022-32635HIGH7.8In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr...
CVE-2022-32623MEDIUM6.7In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of ...
CVE-2022-23506HIGH7.5Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Ro...
CVE-2022-45867HIGH7.2MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with hig...
CVE-2022-45143HIGH7.5The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, mess...
CVE-2022-42471MEDIUM5.4An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In Fort...
CVE-2022-41336MEDIUM4.8An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thro...
CVE-2022-39947HIGH8.8A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versio...
CVE-2022-35845HIGH8.8Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE...
CVE-2022-38766HIGH8.1The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for e...
CVE-2022-4663MEDIUM6.1The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an im...
CVE-2022-4871HIGH7.2A vulnerability classified as problematic was found in ummmmm nflpick-em.com up to 2.2.x. This vulnerability affects the...
CVE-2022-43931CRITICAL10Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4....
CVE-2022-47908HIGH7.8Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the inform...
CVE-2022-47618CRITICAL9.8Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can ...
CVE-2022-47317HIGH7.8Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information an...
CVE-2022-46360HIGH7.8Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker ...
CVE-2022-46309MEDIUM6.5Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit...
CVE-2022-46306HIGH7.8ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now