2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-46428MEDIUM4.8TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of...
CVE-2022-46424HIGH8.1An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point...
CVE-2022-46423HIGH8.1An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can condu...
CVE-2022-46422MEDIUM4.8An issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via...
CVE-2022-46139MEDIUM6.5TP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading ...
CVE-2022-39304MEDIUM4.7ghinstallation provides transport, which implements http.RoundTripper to provide authentication as an installation for G...
CVE-2022-38873HIGH7.5D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-25...
CVE-2022-4579——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2022-4515HIGH7.8A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A cra...
CVE-2022-43875MEDIUM5.5IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock ...
CVE-2022-43872MEDIUM5.3 IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows g...
CVE-2022-23537CRITICAL9.8PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto...
CVE-2022-46076HIGH7.5D-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi.
CVE-2022-4619MEDIUM4.8The Sidebar Widgets by CodeLights plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Extra CSS c...
CVE-2022-46020CRITICAL9.8WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.
CVE-2022-46551HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInfo...
CVE-2022-46550HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInfo...
CVE-2022-46549HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControl...
CVE-2022-46548HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/DhcpListClient.
CVE-2022-46547HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer.
CVE-2022-46546HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic.
CVE-2022-46545HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-46544HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand.
CVE-2022-46543HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mitInterface parameter at /goform/addressNat.
CVE-2022-46542HIGH7.5Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat.

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now