2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-25218HIGH8.1The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated at...
CVE-2022-25217HIGH7.8Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on the local area network t...
CVE-2022-25214HIGH7.4Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensiti...
CVE-2022-25090HIGH8.1Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure ...
CVE-2022-24960HIGH7.8A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. A crafted PDF can overwrite RIP with data pr...
CVE-2022-24931HIGH7.8Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthori...
CVE-2022-24928HIGH7.8Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP.
CVE-2022-24915HIGH8.8The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to in...
CVE-2022-24644HIGH8.8ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated u...
CVE-2022-24618HIGH7.8Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unpr...
CVE-2022-24601HIGH7.5Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information t...
CVE-2022-24396HIGH7.8The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functiona...
CVE-2022-24286HIGH7.8Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnera...
CVE-2022-24285HIGH7.8Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process commun...
CVE-2022-23940HIGH8.8SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Sched...
CVE-2022-22985HIGH8.8The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to in...
CVE-2022-22834HIGH8.8An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL function...
CVE-2022-22547HIGH7.5Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would othe...
CVE-2022-21219HIGH7.8Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an ...
CVE-2022-21124HIGH7.8Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an...
CVE-2022-20054HIGH7.8In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local esc...
CVE-2022-20053HIGH7.8In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local ...
CVE-2022-20048HIGH7.8In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala...
CVE-2022-20047HIGH7.8In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala...
CVE-2022-0903HIGH7.5A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now