2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3709 | HIGH | 8.4 | 0.8% | Dec 1, 2022 | A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sopho... |
| CVE-2022-3696 | HIGH | 7.2 | 1.1% | Dec 1, 2022 | A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older tha... |
| CVE-2022-3226 | HIGH | 7.2 | 1.7% | Dec 1, 2022 | An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall... |
| CVE-2022-2969 | HIGH | 7.5 | 2.3% | Dec 1, 2022 | Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname int... |
| CVE-2022-29837 | HIGH | 7.8 | 0.2% | Dec 1, 2022 | A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which c... |
| CVE-2022-4257 | CRITICAL | 9.8 | 43.9% | Dec 1, 2022 | A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknow... |
| CVE-2022-37017 | HIGH | 7.5 | 1.1% | Dec 1, 2022 | Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Contr... |
| CVE-2022-37016 | CRITICAL | 9.8 | 0.7% | Dec 1, 2022 | Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type... |
| CVE-2022-30528 | CRITICAL | 9.8 | 1.2% | Dec 1, 2022 | SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attacke... |
| CVE-2022-28607 | HIGH | 7.5 | 0.8% | Dec 1, 2022 | An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers t... |
| CVE-2022-3270 | CRITICAL | 9.8 | 1.1% | Dec 1, 2022 | In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which c... |
| CVE-2022-1471 | CRITICAL | 9.8 | 99.6% | Dec 1, 2022 | SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing ... |
| CVE-2022-4221 | CRITICAL | 9.8 | 4.8% | Dec 1, 2022 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25... |
| CVE-2022-45050 | MEDIUM | 6.1 | 0.4% | Dec 1, 2022 | A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's br... |
| CVE-2022-4253 | MEDIUM | 5.4 | 0.4% | Dec 1, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnera... |
| CVE-2022-4252 | MEDIUM | 6.1 | 0.4% | Dec 1, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affec... |
| CVE-2022-4251 | MEDIUM | 5.4 | 0.4% | Dec 1, 2022 | A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some u... |
| CVE-2022-4250 | MEDIUM | 6.1 | 0.4% | Dec 1, 2022 | A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerabil... |
| CVE-2022-4249 | MEDIUM | 6.1 | 0.4% | Dec 1, 2022 | A vulnerability, which was classified as problematic, was found in Movie Ticket Booking System. Affected is an unknown f... |
| CVE-2022-4248 | CRITICAL | 9.8 | 0.5% | Dec 1, 2022 | A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System. This issue affects som... |
| CVE-2022-4247 | CRITICAL | 9.8 | 0.5% | Dec 1, 2022 | A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code... |
| CVE-2022-4246 | HIGH | 7.5 | 0.7% | Dec 1, 2022 | A vulnerability classified as problematic has been found in Kakao PotPlayer. This affects an unknown part of the compone... |
| CVE-2022-36431 | CRITICAL | 9.8 | 1.1% | Dec 1, 2022 | An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to... |
| CVE-2022-45640 | HIGH | 7.5 | 1.0% | Dec 1, 2022 | Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local). |
| CVE-2022-45045 | HIGH | 8.8 | 1.2% | Dec 1, 2022 | Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C74311... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now