2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45647 | HIGH | 7.5 | 0.8% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeed parameter in the formSetClient... |
| CVE-2022-45646 | HIGH | 7.5 | 0.8% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeedUp parameter in the formSetClie... |
| CVE-2022-45645 | HIGH | 7.5 | 0.8% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilt... |
| CVE-2022-45644 | HIGH | 7.5 | 0.8% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the formSetClientSt... |
| CVE-2022-45643 | HIGH | 7.5 | 0.8% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the addWifiMacFilte... |
| CVE-2022-45641 | HIGH | 7.5 | 0.8% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg. |
| CVE-2022-45674 | MEDIUM | 6.5 | 0.3% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot. |
| CVE-2022-45673 | MEDIUM | 6.5 | 0.3% | Dec 2, 2022 | Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet. |
| CVE-2022-44367 | CRITICAL | 9.8 | 0.9% | Dec 2, 2022 | Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setUplinkInfo. |
| CVE-2022-44366 | CRITICAL | 9.8 | 9.9% | Dec 2, 2022 | Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo. |
| CVE-2022-44365 | CRITICAL | 9.8 | 0.9% | Dec 2, 2022 | Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd. |
| CVE-2022-44363 | CRITICAL | 9.8 | 0.8% | Dec 2, 2022 | Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setSnmpInfo. |
| CVE-2022-44362 | CRITICAL | 9.8 | 0.9% | Dec 2, 2022 | Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule. |
| CVE-2022-44348 | HIGH | 7.2 | 0.7% | Dec 2, 2022 | Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=. |
| CVE-2022-44347 | HIGH | 7.2 | 0.7% | Dec 2, 2022 | Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/view_inquiry&id=. |
| CVE-2022-44345 | HIGH | 7.2 | 0.7% | Dec 2, 2022 | Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=quotes/view_quote&id=. |
| CVE-2022-44277 | HIGH | 7.2 | 0.7% | Dec 2, 2022 | Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product. |
| CVE-2022-3591 | HIGH | 7.8 | 0.4% | Dec 2, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0789. |
| CVE-2022-4271 | MEDIUM | 5.4 | 0.7% | Dec 2, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4. |
| CVE-2022-45483 | MEDIUM | 5.9 | 0.4% | Dec 2, 2022 | Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected device) to see all dat... |
| CVE-2022-45482 | CRITICAL | 9.8 | 1.3% | Dec 2, 2022 | Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticat... |
| CVE-2022-45480 | MEDIUM | 5.9 | 0.4% | Dec 2, 2022 | PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the server and a connected devi... |
| CVE-2022-43272 | HIGH | 7.5 | 1.6% | Dec 2, 2022 | DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object. |
| CVE-2022-46159 | MEDIUM | 4.3 | 0.6% | Dec 2, 2022 | Discourse is an open-source discussion platform. In version 2.8.13 and prior on the `stable` branch and version 2.9.0.be... |
| CVE-2022-45215 | MEDIUM | 5.4 | 0.4% | Dec 2, 2022 | A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now