2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0989 | HIGH | 7.5 | 1.2% | Apr 11, 2022 | An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load... |
| CVE-2022-0920 | HIGH | 7.5 | 1.4% | Apr 11, 2022 | The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its end... |
| CVE-2022-0828 | HIGH | 7.5 | 1.5% | Apr 11, 2022 | The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a downlo... |
| CVE-2022-27089 | HIGH | 7.8 | 0.2% | Apr 11, 2022 | In Fujitsu PlugFree Network <= 7.3.0.3, an Unquoted service path in PFNService.exe software allows a local attacker to p... |
| CVE-2022-27088 | HIGH | 7.8 | 0.6% | Apr 11, 2022 | Ivanti DSM Remote <= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to launch processes with ... |
| CVE-2022-27041 | HIGH | 7.5 | 1.3% | Apr 11, 2022 | Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to i... |
| CVE-2022-26413 | HIGH | 8 | 0.7% | Apr 11, 2022 | A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a... |
| CVE-2022-0556 | HIGH | 7.8 | 0.3% | Apr 11, 2022 | A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP... |
| CVE-2022-28893 | HIGH | 7.8 | 0.4% | Apr 11, 2022 | The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the in... |
| CVE-2022-27295 | HIGH | 7.5 | 1.4% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability ... |
| CVE-2022-27294 | HIGH | 7.5 | 1.4% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerabili... |
| CVE-2022-27293 | HIGH | 7.5 | 2.4% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability all... |
| CVE-2022-27292 | HIGH | 7.5 | 1.1% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerabilit... |
| CVE-2022-27291 | HIGH | 7.5 | 1.4% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability... |
| CVE-2022-27290 | HIGH | 7.5 | 1.4% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerabilit... |
| CVE-2022-27289 | HIGH | 7.5 | 1.4% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability al... |
| CVE-2022-27288 | HIGH | 7.5 | 1.4% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPTP. This vulnerability al... |
| CVE-2022-27287 | HIGH | 7.5 | 1.5% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPPoE. This vulnerability a... |
| CVE-2022-27286 | HIGH | 7.5 | 1.5% | Apr 10, 2022 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanNonLogin. This vulnerabilit... |
| CVE-2022-27279 | HIGH | 7.5 | 1.4% | Apr 10, 2022 | InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read ... |
| CVE-2022-27883 | HIGH | 7.3 | 1.2% | Apr 9, 2022 | A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-craft... |
| CVE-2022-26180 | HIGH | 8.8 | 3.8% | Apr 8, 2022 | qdPM 9.2 allows Cross-Site Request Forgery (CSRF) via the index.php/myAccount/update URI. |
| CVE-2022-24428 | HIGH | 8.8 | 0.6% | Apr 8, 2022 | Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservation... |
| CVE-2022-24821 | HIGH | 8.1 | 0.8% | Apr 8, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Simple users ca... |
| CVE-2022-22339 | HIGH | 7.3 | 0.6% | Apr 8, 2022 | IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now