2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-23139HIGH8.8ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is...
CVE-2022-22798HIGH8.8Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control v20.4.74 b10, v22.1.20 b62, v22.1.30 b49 - An attacker...
CVE-2022-29369HIGH7.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c.
CVE-2022-29368HIGH7.1Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the ...
CVE-2022-28819HIGH7.8Adobe Character Animator versions 4.4.2 (and earlier) and 22.3 (and earlier) are affected by an out-of-bounds write vuln...
CVE-2022-27172HIGH8.8A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37...
CVE-2022-26782HIGH8.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ...
CVE-2022-26781HIGH8.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ...
CVE-2022-26780HIGH8.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ...
CVE-2022-26518HIGH8.8An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V...
CVE-2022-26420HIGH8.8An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 ...
CVE-2022-26085HIGH8.8An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4...
CVE-2022-26075HIGH8.8An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 ...
CVE-2022-26042HIGH8.8An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4...
CVE-2022-26007HIGH7.2An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4....
CVE-2022-26002HIGH7.2A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V...
CVE-2022-25995HIGH8.8A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A sp...
CVE-2022-22139HIGH7.3Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potenti...
CVE-2022-21809HIGH8.1A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A special...
CVE-2022-21182HIGH8.8A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter...
CVE-2022-21128HIGH7.8Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated...
CVE-2022-30002HIGH7.2Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=.
CVE-2022-29298HIGH7.5SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
CVE-2022-1699HIGH7.5Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abu...
CVE-2022-1698HIGH7.5Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerab...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now