2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44254 | HIGH | 8.8 | 2.1% | Nov 23, 2022 | TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg... |
| CVE-2022-44253 | HIGH | 8.8 | 2.1% | Nov 23, 2022 | TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosi... |
| CVE-2022-44252 | CRITICAL | 9.8 | 1.8% | Nov 23, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting ... |
| CVE-2022-44251 | CRITICAL | 9.8 | 1.8% | Nov 23, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function. |
| CVE-2022-44250 | CRITICAL | 9.8 | 1.8% | Nov 23, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg func... |
| CVE-2022-44249 | CRITICAL | 9.8 | 1.8% | Nov 23, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFil... |
| CVE-2022-44139 | CRITICAL | 9.8 | 0.8% | Nov 23, 2022 | Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php. |
| CVE-2022-45151 | MEDIUM | 5.4 | 0.7% | Nov 23, 2022 | The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied dat... |
| CVE-2022-45150 | MEDIUM | 6.1 | 0.7% | Nov 23, 2022 | A reflected cross-site scripting vulnerability was discovered in Moodle. This flaw exists due to insufficient sanitizati... |
| CVE-2022-45149 | MEDIUM | 5.4 | 0.4% | Nov 23, 2022 | A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course red... |
| CVE-2022-42896 | HIGH | 8.8 | 2.1% | Nov 23, 2022 | There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_c... |
| CVE-2022-42895 | MEDIUM | 6.5 | 0.4% | Nov 23, 2022 | There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function whic... |
| CVE-2022-45462 | CRITICAL | 9.8 | 2.8% | Nov 23, 2022 | Alarm instance management has command injection when there is a specific command configured. It is only for logged-in us... |
| CVE-2022-4045 | MEDIUM | 6.5 | 0.6% | Nov 23, 2022 | A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple reques... |
| CVE-2022-4044 | MEDIUM | 6.5 | 1.1% | Nov 23, 2022 | A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large auto... |
| CVE-2022-4019 | MEDIUM | 6.5 | 0.7% | Nov 23, 2022 | A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server vi... |
| CVE-2022-45472 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onpo... |
| CVE-2022-43213 | CRITICAL | 9.8 | 0.8% | Nov 23, 2022 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.ph... |
| CVE-2022-41446 | MEDIUM | 5.4 | 1.1% | Nov 23, 2022 | An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to a... |
| CVE-2022-40770 | HIGH | 7.2 | 82.5% | Nov 23, 2022 | Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can ... |
| CVE-2022-38147 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3). |
| CVE-2022-37421 | MEDIUM | 5.4 | 0.5% | Nov 23, 2022 | Silverstripe silverstripe/cms through 4.11.0 allows XSS. |
| CVE-2022-36337 | HIGH | 8.2 | 0.2% | Nov 23, 2022 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the Me... |
| CVE-2022-34830 | HIGH | 7.5 | 0.5% | Nov 23, 2022 | An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GP... |
| CVE-2022-42095 | MEDIUM | 4.8 | 1.9% | Nov 23, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page con... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now