2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44147 | — | — | — | Dec 12, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-16891. Reason: This candidate is a reservation d... |
| CVE-2022-43503 | — | — | — | Dec 12, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-45980 | HIGH | 8.8 | 7.5% | Dec 12, 2022 | Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via /goform/SysToolRestoreSet . |
| CVE-2022-45979 | HIGH | 7.5 | 0.8% | Dec 12, 2022 | Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wif... |
| CVE-2022-45977 | HIGH | 8.8 | 2.1% | Dec 12, 2022 | Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function. |
| CVE-2022-45957 | HIGH | 7.5 | 11.5% | Dec 12, 2022 | ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow. |
| CVE-2022-45956 | MEDIUM | 5.3 | 0.8% | Dec 12, 2022 | Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method... |
| CVE-2022-45043 | HIGH | 8.8 | 2.2% | Dec 12, 2022 | Tenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set. |
| CVE-2022-4421 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | A vulnerability was found in rAthena FluxCP. It has been classified as problematic. Affected is an unknown function of t... |
| CVE-2022-45970 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board. |
| CVE-2022-45968 | HIGH | 8.8 | 1.0% | Dec 12, 2022 | Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (ev... |
| CVE-2022-44654 | HIGH | 7.5 | 0.8% | Dec 12, 2022 | Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied wi... |
| CVE-2022-44653 | HIGH | 7.8 | 0.6% | Dec 12, 2022 | A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local... |
| CVE-2022-44652 | HIGH | 7.8 | 0.3% | Dec 12, 2022 | An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could all... |
| CVE-2022-44651 | HIGH | 7 | 0.2% | Dec 12, 2022 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loca... |
| CVE-2022-44650 | HIGH | 7.8 | 0.3% | Dec 12, 2022 | A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as ... |
| CVE-2022-44649 | HIGH | 7.8 | 0.3% | Dec 12, 2022 | An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One... |
| CVE-2022-44648 | MEDIUM | 5.5 | 0.7% | Dec 12, 2022 | An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to di... |
| CVE-2022-44647 | MEDIUM | 5.5 | 0.7% | Dec 12, 2022 | An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to di... |
| CVE-2022-44533 | HIGH | 7.2 | 1.3% | Dec 12, 2022 | A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run ar... |
| CVE-2022-44532 | MEDIUM | 6.5 | 0.7% | Dec 12, 2022 | An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise command line interface. Success... |
| CVE-2022-43780 | HIGH | 7.5 | 0.9% | Dec 12, 2022 | Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack. |
| CVE-2022-43542 | HIGH | 8.8 | 1.2% | Dec 12, 2022 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit... |
| CVE-2022-43541 | HIGH | 7.2 | 1.5% | Dec 12, 2022 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit... |
| CVE-2022-43518 | MEDIUM | 6.5 | 0.7% | Dec 12, 2022 | An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful explo... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now