2022 CVE Vulnerabilities
27,527 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44801 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control. |
| CVE-2022-44202 | CRITICAL | 9.8 | 1.2% | Nov 22, 2022 | D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow. |
| CVE-2022-44201 | CRITICAL | 9.8 | 1.2% | Nov 22, 2022 | D-Link DIR823G 1.02B05 is vulnerable to Commad Injection. |
| CVE-2022-44184 | CRITICAL | 9.8 | 1.0% | Nov 22, 2022 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec. |
| CVE-2022-44200 | CRITICAL | 9.8 | 1.0% | Nov 22, 2022 | Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_se... |
| CVE-2022-44199 | CRITICAL | 9.8 | 1.0% | Nov 22, 2022 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip. |
| CVE-2022-44198 | CRITICAL | 9.8 | 1.0% | Nov 22, 2022 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1. |
| CVE-2022-44197 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip. |
| CVE-2022-44196 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1. |
| CVE-2022-44194 | CRITICAL | 9.8 | 1.4% | Nov 22, 2022 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec. |
| CVE-2022-44193 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , en... |
| CVE-2022-44191 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2. |
| CVE-2022-44190 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering. |
| CVE-2022-44188 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering. |
| CVE-2022-44187 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri. |
| CVE-2022-44186 | CRITICAL | 9.8 | 1.1% | Nov 22, 2022 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri. |
| CVE-2022-42989 | CRITICAL | 9 | 1.0% | Nov 22, 2022 | ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Caixa... |
| CVE-2022-41445 | MEDIUM | 4.8 | 1.0% | Nov 22, 2022 | A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute... |
| CVE-2022-33012 | HIGH | 8.8 | 1.3% | Nov 22, 2022 | Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack. |
| CVE-2022-42098 | HIGH | 8.8 | 1.2% | Nov 22, 2022 | KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php. |
| CVE-2022-42097 | MEDIUM | 4.8 | 0.8% | Nov 22, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' . |
| CVE-2022-42094 | MEDIUM | 4.8 | 2.5% | Nov 22, 2022 | Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' c... |
| CVE-2022-3910 | HIGH | 7.8 | 1.0% | Nov 22, 2022 | Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_ur... |
| CVE-2022-38462 | MEDIUM | 6.1 | 0.5% | Nov 22, 2022 | Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build... |
| CVE-2022-0222 | HIGH | 7.5 | 0.6% | Nov 22, 2022 | A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet commu... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now