2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36788 | HIGH | 7.8 | 0.6% | Apr 20, 2023 | A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and ... |
| CVE-2022-46302 | HIGH | 8.8 | 0.4% | Apr 20, 2023 | Broad access controls could allow site users to directly interact with the system Apache installation when providing the... |
| CVE-2022-29608 | HIGH | 7.5 | 0.9% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. An intent with a port that is an intermediate point of its path installs an inval... |
| CVE-2022-29607 | HIGH | 7.5 | 0.7% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows ... |
| CVE-2022-29605 | HIGH | 7.5 | 0.7% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of an intent into an OpenFl... |
| CVE-2022-24035 | HIGH | 7.5 | 0.9% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. The purge-requested intent remains on the list, but it does not respond to change... |
| CVE-2022-4308 | HIGH | 8.8 | 0.2% | Apr 19, 2023 | Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteMan... |
| CVE-2022-43377 | HIGH | 7.5 | 0.6% | Apr 18, 2023 | A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account ... |
| CVE-2022-34127 | HIGH | 7.5 | 6.7% | Apr 16, 2023 | The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.p... |
| CVE-2022-34126 | HIGH | 7.5 | 1.2% | Apr 16, 2023 | The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php f... |
| CVE-2022-40946 | HIGH | 7.5 | 8.0% | Apr 16, 2023 | On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via t... |
| CVE-2022-38841 | HIGH | 8.8 | 10.7% | Apr 16, 2023 | Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagn... |
| CVE-2022-38840 | HIGH | 7.5 | 9.8% | Apr 16, 2023 | cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file uplo... |
| CVE-2022-37255 | HIGH | 7.5 | 4.9% | Apr 16, 2023 | TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL07552646... |
| CVE-2022-47522 | HIGH | 7.5 | 0.9% | Apr 15, 2023 | The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept (possibly cleartext) t... |
| CVE-2022-45030 | HIGH | 8.8 | 2.7% | Apr 15, 2023 | A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may... |
| CVE-2022-47501 | HIGH | 7.5 | 10.2% | Apr 14, 2023 | Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a p... |
| CVE-2022-45178 | HIGH | 8.8 | 1.0% | Apr 14, 2023 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdes... |
| CVE-2022-40532 | HIGH | 7.8 | 0.1% | Apr 13, 2023 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
| CVE-2022-40503 | HIGH | 7.5 | 0.4% | Apr 13, 2023 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. |
| CVE-2022-33302 | HIGH | 7.8 | 0.1% | Apr 13, 2023 | Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than ... |
| CVE-2022-33301 | HIGH | 7.8 | 0.1% | Apr 13, 2023 | Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted addr... |
| CVE-2022-33298 | HIGH | 7.8 | 0.1% | Apr 13, 2023 | Memory corruption due to use after free in Modem while modem initialization. |
| CVE-2022-33296 | HIGH | 7.8 | 0.1% | Apr 13, 2023 | Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update... |
| CVE-2022-33295 | HIGH | 7.5 | 0.4% | Apr 13, 2023 | Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now