2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-22128CRITICAL9.8Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer...
CVE-2022-0699CRITICAL9.8A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attack...
CVE-2022-42237CRITICAL9.8A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.
CVE-2022-42171CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.
CVE-2022-42170CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.
CVE-2022-42169CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.
CVE-2022-42168CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.
CVE-2022-42167CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.
CVE-2022-42166CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.
CVE-2022-42154CRITICAL9.8An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to e...
CVE-2022-41542MEDIUM5.4devhub 0.102.0 was discovered to contain a broken session control.
CVE-2022-41498HIGH7.2Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventor...
CVE-2022-41472MEDIUM5.474cmsSE v3.12.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /apiadmin/notice/...
CVE-2022-41471MEDIUM6.574cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credential...
CVE-2022-42165CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.
CVE-2022-42164CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.
CVE-2022-42163CRITICAL9.8Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.
CVE-2022-3555——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2022-3554——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2022-3553MEDIUM6.5A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the fil...
CVE-2022-3551MEDIUM6.5A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the func...
CVE-2022-3550HIGH8.8A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCou...
CVE-2022-3549HIGH7.2A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic....
CVE-2022-3548MEDIUM4.8A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problemat...
CVE-2022-3547MEDIUM4.8A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problem...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now