2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41743 | HIGH | 7 | 0.2% | Oct 19, 2022 | NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a l... |
| CVE-2022-41742 | HIGH | 7.1 | 1.1% | Oct 19, 2022 | NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and... |
| CVE-2022-41741 | HIGH | 7.8 | 0.8% | Oct 19, 2022 | NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and... |
| CVE-2022-41694 | MEDIUM | 4.9 | 0.6% | Oct 19, 2022 | In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and B... |
| CVE-2022-41691 | HIGH | 7.5 | 0.6% | Oct 19, 2022 | When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd ... |
| CVE-2022-41624 | HIGH | 7.5 | 0.6% | Oct 19, 2022 | In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.2, 15.1.x before 15.1.7, 14.1.x before 14.1.5.2, and 13.... |
| CVE-2022-41617 | HIGH | 7.2 | 1.1% | Oct 19, 2022 | In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the... |
| CVE-2022-38107 | MEDIUM | 5.3 | 0.6% | Oct 19, 2022 | Sensitive information could be displayed when a detailed technical error message is posted. This information could discl... |
| CVE-2022-36795 | HIGH | 7.5 | 0.6% | Oct 19, 2022 | In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, whe... |
| CVE-2022-31684 | MEDIUM | 4.3 | 0.6% | Oct 19, 2022 | Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. ... |
| CVE-2022-20424 | — | — | — | Oct 19, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-43029 | CRITICAL | 9.8 | 0.8% | Oct 19, 2022 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the time parameter at /go... |
| CVE-2022-43028 | CRITICAL | 9.8 | 0.8% | Oct 19, 2022 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter at... |
| CVE-2022-43027 | CRITICAL | 9.8 | 0.8% | Oct 19, 2022 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the firewallEn parameter ... |
| CVE-2022-43026 | CRITICAL | 9.8 | 0.8% | Oct 19, 2022 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the endIp parameter at /g... |
| CVE-2022-43025 | CRITICAL | 9.8 | 0.8% | Oct 19, 2022 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the startIp parameter at ... |
| CVE-2022-43024 | CRITICAL | 9.8 | 0.8% | Oct 19, 2022 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the list parameter at /go... |
| CVE-2022-41708 | MEDIUM | 4.3 | 0.5% | Oct 19, 2022 | Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the worksp... |
| CVE-2022-43023 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerr... |
| CVE-2022-43022 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag deletion func... |
| CVE-2022-43021 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable. |
| CVE-2022-43020 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag update functi... |
| CVE-2022-43019 | CRITICAL | 9.8 | 1.8% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager's ajax fu... |
| CVE-2022-43018 | MEDIUM | 6.1 | 1.3% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email parameter i... |
| CVE-2022-43017 | MEDIUM | 6.1 | 1.3% | Oct 19, 2022 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFile compone... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now