2022 CVE Vulnerabilities
27,565 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20923 | CRITICAL | 9.8 | 0.8% | Sep 8, 2022 | A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and ... |
| CVE-2022-20863 | MEDIUM | 5.3 | 0.8% | Sep 8, 2022 | A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, rem... |
| CVE-2022-20696 | HIGH | 8.8 | 0.3% | Sep 8, 2022 | A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated,... |
| CVE-2022-30079 | HIGH | 8.8 | 24.4% | Sep 8, 2022 | Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/a... |
| CVE-2022-27593 | CRITICAL | 9.1 | 87.9% | Sep 8, 2022 | An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Statio... |
| CVE-2022-3148 | MEDIUM | 6.1 | 0.5% | Sep 8, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0. |
| CVE-2022-3138 | MEDIUM | 6.1 | 0.5% | Sep 8, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0. |
| CVE-2022-38400 | MEDIUM | 5.9 | 1.2% | Sep 8, 2022 | Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use... |
| CVE-2022-38399 | MEDIUM | 6.8 | 0.3% | Sep 8, 2022 | Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-... |
| CVE-2022-38394 | CRITICAL | 9.8 | 0.9% | Sep 8, 2022 | Use of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a... |
| CVE-2022-38094 | HIGH | 8.8 | 1.5% | Sep 8, 2022 | OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 al... |
| CVE-2022-36403 | HIGH | 7.8 | 0.2% | Sep 8, 2022 | Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker... |
| CVE-2022-35273 | HIGH | 8.8 | 1.5% | Sep 8, 2022 | OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allow... |
| CVE-2022-34869 | HIGH | 8.8 | 0.9% | Sep 8, 2022 | Undocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2 firmware versions prior... |
| CVE-2022-33941 | CRITICAL | 9.8 | 1.7% | Sep 8, 2022 | PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted me... |
| CVE-2022-28220 | HIGH | 7.5 | 1.7% | Sep 8, 2022 | Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS com... |
| CVE-2022-25914 | CRITICAL | 9.8 | 1.3% | Sep 8, 2022 | The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDocker... |
| CVE-2022-25897 | HIGH | 7.5 | 1.0% | Sep 8, 2022 | The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limita... |
| CVE-2022-37146 | MEDIUM | 5.3 | 0.7% | Sep 8, 2022 | The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login a... |
| CVE-2022-37145 | HIGH | 7.5 | 0.9% | Sep 8, 2022 | The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configure... |
| CVE-2022-37144 | HIGH | 8.8 | 0.8% | Sep 8, 2022 | The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthent... |
| CVE-2022-38531 | HIGH | 8.8 | 1.8% | Sep 8, 2022 | FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function. |
| CVE-2022-37779 | HIGH | 7.2 | 1.7% | Sep 8, 2022 | Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command exe... |
| CVE-2022-37778 | HIGH | 7.2 | 1.7% | Sep 8, 2022 | Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command exe... |
| CVE-2022-37777 | HIGH | 7.2 | 1.7% | Sep 8, 2022 | Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now