2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46366 | CRITICAL | 9.8 | 3.6% | Dec 2, 2022 | Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to... |
| CVE-2022-4270 | LOW | 2.6 | 0.5% | Dec 2, 2022 | Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permi... |
| CVE-2022-2808 | HIGH | 8.8 | 0.7% | Dec 2, 2022 | Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows... |
| CVE-2022-2807 | CRITICAL | 9.8 | 0.6% | Dec 2, 2022 | SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects... |
| CVE-2022-45562 | HIGH | 8.8 | 1.0% | Dec 2, 2022 | Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system s... |
| CVE-2022-44930 | CRITICAL | 9.8 | 2.5% | Dec 2, 2022 | D-Link DHP-W310AV 3.10EU was discovered to contain a command injection vulnerability via the System Checks function. |
| CVE-2022-44929 | CRITICAL | 9.8 | 1.1% | Dec 2, 2022 | An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitr... |
| CVE-2022-44928 | CRITICAL | 9.8 | 2.7% | Dec 2, 2022 | D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function. |
| CVE-2022-43325 | CRITICAL | 9.8 | 3.2% | Dec 2, 2022 | An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MP... |
| CVE-2022-44212 | MEDIUM | 5.9 | 0.6% | Dec 1, 2022 | In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel. |
| CVE-2022-44211 | HIGH | 7.4 | 0.6% | Dec 1, 2022 | In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings. |
| CVE-2022-43333 | CRITICAL | 9.8 | 1.6% | Dec 1, 2022 | Telenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution (RCE) vulnerability in the... |
| CVE-2022-35120 | HIGH | 8.8 | 0.2% | Dec 1, 2022 | IXPdata EasyInstall 6.6.14725 contains an access control issue. |
| CVE-2022-42718 | HIGH | 7.8 | 0.2% | Dec 1, 2022 | Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authen... |
| CVE-2022-41971 | MEDIUM | 6.5 | 0.8% | Dec 1, 2022 | Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, a... |
| CVE-2022-41970 | MEDIUM | 5.3 | 0.6% | Dec 1, 2022 | Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares ... |
| CVE-2022-41969 | LOW | 2.7 | 0.8% | Dec 1, 2022 | Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.11, 24.0.7, and 25.0.0, there is no pas... |
| CVE-2022-41968 | MEDIUM | 5.3 | 0.8% | Dec 1, 2022 | Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths ar... |
| CVE-2022-23737 | MEDIUM | 6.5 | 0.7% | Dec 1, 2022 | An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improp... |
| CVE-2022-43901 | MEDIUM | 5.5 | 0.2% | Dec 1, 2022 | IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticate... |
| CVE-2022-43900 | MEDIUM | 6.5 | 0.2% | Dec 1, 2022 | IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A loca... |
| CVE-2022-41297 | MEDIUM | 6.5 | 0.2% | Dec 1, 2022 | IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou... |
| CVE-2022-3713 | HIGH | 8.8 | 0.7% | Dec 1, 2022 | A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall relea... |
| CVE-2022-3711 | MEDIUM | 4.3 | 0.7% | Dec 1, 2022 | A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in ... |
| CVE-2022-3710 | LOW | 2.7 | 0.7% | Dec 1, 2022 | A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database conten... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now