2022 CVE Vulnerabilities
27,525 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44183 | CRITICAL | 9.8 | 1.0% | Nov 21, 2022 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic. |
| CVE-2022-44180 | CRITICAL | 9.8 | 0.7% | Nov 21, 2022 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter. |
| CVE-2022-44178 | CRITICAL | 9.8 | 0.7% | Nov 21, 2022 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB. |
| CVE-2022-44177 | CRITICAL | 9.8 | 0.7% | Nov 21, 2022 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart. |
| CVE-2022-44176 | CRITICAL | 9.8 | 0.8% | Nov 21, 2022 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic. |
| CVE-2022-44175 | CRITICAL | 9.8 | 0.8% | Nov 21, 2022 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg. |
| CVE-2022-44174 | CRITICAL | 9.8 | 0.7% | Nov 21, 2022 | Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName. |
| CVE-2022-44172 | CRITICAL | 9.8 | 0.7% | Nov 21, 2022 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler. |
| CVE-2022-44171 | CRITICAL | 9.8 | 0.7% | Nov 21, 2022 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set. |
| CVE-2022-3634 | CRITICAL | 9.8 | 3.6% | Nov 21, 2022 | The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV fi... |
| CVE-2022-3600 | CRITICAL | 9.8 | 1.2% | Nov 21, 2022 | The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which c... |
| CVE-2022-4093 | CRITICAL | 9.8 | 4.0% | Nov 21, 2022 | SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or pe... |
| CVE-2022-4070 | CRITICAL | 9.8 | 0.6% | Nov 20, 2022 | Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0. |
| CVE-2022-41155 | CRITICAL | 9.8 | 0.7% | Nov 19, 2022 | Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress. |
| CVE-2022-45132 | CRITICAL | 9.8 | 1.9% | Nov 18, 2022 | In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-... |
| CVE-2022-44584 | CRITICAL | 9.1 | 0.8% | Nov 18, 2022 | Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress. |
| CVE-2022-42698 | CRITICAL | 9.8 | 0.9% | Nov 18, 2022 | Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress. |
| CVE-2022-42497 | CRITICAL | 9.8 | 1.1% | Nov 18, 2022 | Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress. |
| CVE-2022-34827 | CRITICAL | 9.9 | 0.8% | Nov 18, 2022 | Carel Boss Mini 1.5.0 has Improper Access Control. |
| CVE-2022-41900 | CRITICAL | 9.8 | 0.6% | Nov 18, 2022 | TensorFlow is an open source platform for machine learning. The security vulnerability results in FractionalMax(AVG)Pool... |
| CVE-2022-41880 | CRITICAL | 9.1 | 0.4% | Nov 18, 2022 | TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value ... |
| CVE-2022-41840 | CRITICAL | 9.8 | 5.1% | Nov 18, 2022 | Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress. |
| CVE-2022-41781 | CRITICAL | 9.8 | 0.6% | Nov 18, 2022 | Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress. |
| CVE-2022-41652 | CRITICAL | 9.8 | 0.7% | Nov 18, 2022 | Bypass vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress. |
| CVE-2022-45474 | CRITICAL | 9.8 | 0.9% | Nov 18, 2022 | drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now