2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25671 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Denial of service in MODEM due to reachable assertion in Snapdragon Mobile |
| CVE-2022-25667 | HIGH | 7.5 | 0.3% | Nov 15, 2022 | Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networ... |
| CVE-2022-45402 | MEDIUM | 6.1 | 81.8% | Nov 15, 2022 | In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint. |
| CVE-2022-42060 | HIGH | 7.5 | 1.0% | Nov 15, 2022 | Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe functio... |
| CVE-2022-42058 | CRITICAL | 9.8 | 1.2% | Nov 15, 2022 | Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage... |
| CVE-2022-42053 | HIGH | 7.8 | 1.0% | Nov 15, 2022 | Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the P... |
| CVE-2022-41396 | HIGH | 7.8 | 1.4% | Nov 15, 2022 | Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities ... |
| CVE-2022-41395 | HIGH | 7.8 | 1.4% | Nov 15, 2022 | Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the d... |
| CVE-2022-40846 | MEDIUM | 4.8 | 0.6% | Nov 15, 2022 | In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) vulnerability exists allowing... |
| CVE-2022-40844 | MEDIUM | 5.4 | 0.5% | Nov 15, 2022 | In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scriptin... |
| CVE-2022-42132 | MEDIUM | 5.9 | 0.6% | Nov 15, 2022 | The Test LDAP Users functionality in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.0 fix pack 102 and earlier,... |
| CVE-2022-42131 | MEDIUM | 4.8 | 0.3% | Nov 15, 2022 | Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST d... |
| CVE-2022-42130 | MEDIUM | 4.3 | 0.7% | Nov 15, 2022 | The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 bef... |
| CVE-2022-42129 | MEDIUM | 4.3 | 0.7% | Nov 15, 2022 | An Insecure direct object reference (IDOR) vulnerability in the Dynamic Data Mapping module in Liferay Portal 7.3.2 thro... |
| CVE-2022-40847 | HIGH | 7.8 | 1.0% | Nov 15, 2022 | In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function fo... |
| CVE-2022-40845 | MEDIUM | 6.5 | 0.7% | Nov 15, 2022 | The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability. When combined w... |
| CVE-2022-40843 | MEDIUM | 4.9 | 28.8% | Nov 15, 2022 | The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management... |
| CVE-2022-42978 | HIGH | 7.5 | 0.8% | Nov 15, 2022 | In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is mishandled. An unauthenticated a... |
| CVE-2022-42977 | HIGH | 7.5 | 1.0% | Nov 15, 2022 | The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in ... |
| CVE-2022-42128 | MEDIUM | 5.3 | 0.8% | Nov 15, 2022 | The Hypermedia REST APIs module in Liferay Portal 7.4.1 through 7.4.3.4, and Liferay DXP 7.4 GA does not properly check ... |
| CVE-2022-42127 | MEDIUM | 5.3 | 0.8% | Nov 15, 2022 | The Friendly Url module in Liferay Portal 7.4.3.5 through 7.4.3.36, and Liferay DXP 7.4 update 1 though 36 does not prop... |
| CVE-2022-42126 | MEDIUM | 4.3 | 0.8% | Nov 15, 2022 | The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 be... |
| CVE-2022-42125 | HIGH | 7.5 | 0.9% | Nov 15, 2022 | Zip slip vulnerability in FileUtil.unzip in Liferay Portal 7.4.3.5 through 7.4.3.35 and Liferay DXP 7.4 update 1 through... |
| CVE-2022-42124 | HIGH | 7.5 | 1.2% | Nov 15, 2022 | ReDoS vulnerability in LayoutPageTemplateEntryUpgradeProcess in Liferay Portal 7.3.2 through 7.4.3.4 and Liferay DXP 7.2... |
| CVE-2022-42123 | HIGH | 7.5 | 0.9% | Nov 15, 2022 | A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 be... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now