2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46588 | CRITICAL | 9.8 | 0.9% | Dec 30, 2022 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_m... |
| CVE-2022-46586 | CRITICAL | 9.8 | 1.0% | Dec 30, 2022 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in t... |
| CVE-2022-46585 | CRITICAL | 9.8 | 0.9% | Dec 30, 2022 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (su... |
| CVE-2022-46584 | CRITICAL | 9.8 | 1.0% | Dec 30, 2022 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in t... |
| CVE-2022-46583 | CRITICAL | 9.8 | 0.9% | Dec 30, 2022 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (s... |
| CVE-2022-46582 | CRITICAL | 9.8 | 0.9% | Dec 30, 2022 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login_name parameter in the do_graph_auth (... |
| CVE-2022-46581 | CRITICAL | 9.8 | 0.9% | Dec 30, 2022 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in th... |
| CVE-2022-46580 | CRITICAL | 9.8 | 0.9% | Dec 30, 2022 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captiv... |
| CVE-2022-3905 | — | — | — | Dec 30, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-39159 | — | — | — | Dec 30, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2022-4863 | MEDIUM | 6.5 | 0.7% | Dec 30, 2022 | Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1. |
| CVE-2022-4861 | MEDIUM | 4.9 | 0.5% | Dec 30, 2022 | Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to... |
| CVE-2022-4860 | CRITICAL | 9.8 | 0.6% | Dec 30, 2022 | A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function upload_user_da... |
| CVE-2022-4859 | MEDIUM | 6.1 | 0.5% | Dec 30, 2022 | A vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33. This issue affects the funct... |
| CVE-2022-4858 | HIGH | 7.5 | 0.5% | Dec 30, 2022 | Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive... |
| CVE-2022-44621 | CRITICAL | 9.8 | 3.0% | Dec 30, 2022 | Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request. |
| CVE-2022-43396 | HIGH | 8.8 | 56.8% | Dec 30, 2022 | In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed.... |
| CVE-2022-4857 | HIGH | 7.8 | 0.7% | Dec 30, 2022 | A vulnerability was found in Modbus Tools Modbus Poll up to 9.10.0 and classified as critical. Affected by this issue is... |
| CVE-2022-4856 | HIGH | 7.8 | 0.6% | Dec 30, 2022 | A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vul... |
| CVE-2022-4855 | CRITICAL | 9.8 | 26.5% | Dec 30, 2022 | A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is a... |
| CVE-2022-48196 | CRITICAL | 9.8 | 0.9% | Dec 30, 2022 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.... |
| CVE-2022-48194 | HIGH | 8.8 | 33.5% | Dec 30, 2022 | TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a De... |
| CVE-2022-44137 | HIGH | 7.2 | 0.8% | Dec 30, 2022 | SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection. |
| CVE-2022-36437 | CRITICAL | 9.1 | 1.0% | Dec 29, 2022 | The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate ... |
| CVE-2022-30519 | MEDIUM | 6.1 | 2.5% | Dec 29, 2022 | XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary c... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now