2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-47891HIGH8.8All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrat...
CVE-2022-46841HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.
CVE-2022-4956HIGH7.8A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part o...
CVE-2022-35908HIGH8.8Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent.
CVE-2022-48606HIGH7.5Stability-related vulnerability in the binder background management and control module. Successful exploitation of this ...
CVE-2022-4318HIGH7.8A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a speci...
CVE-2022-4244HIGH7.5A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files ...
CVE-2022-3596HIGH7.5An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect s...
CVE-2022-47562HIGH7.5Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service...
CVE-2022-47559HIGH8.8Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to e...
CVE-2022-47555HIGH8.8Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute comman...
CVE-2022-47554HIGH7.5Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical info...
CVE-2022-47553HIGH7.5Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive i...
CVE-2022-3261HIGH7.5A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack o...
CVE-2022-47848HIGH7.5An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.1...
CVE-2022-47631HIGH7.8Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privil...
CVE-2022-35849HIGH8.8An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface ...
CVE-2022-4896HIGH7.5Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows wi...
CVE-2022-48475HIGH8.8Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by...
CVE-2022-48474HIGH7.5Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sendi...
CVE-2022-24093HIGH7.2Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation v...
CVE-2022-1415HIGH8.8A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This f...
CVE-2022-23382HIGH8.1Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through ...
CVE-2022-34227HIGH7.8Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are ...
CVE-2022-34224HIGH7.8Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now