2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2838 | MEDIUM | 5.3 | 0.5% | Aug 16, 2022 | In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced e... |
| CVE-2022-36381 | HIGH | 7.2 | 1.5% | Aug 16, 2022 | OS command injection vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an adm... |
| CVE-2022-36344 | CRITICAL | 9.8 | 0.7% | Aug 16, 2022 | An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple pro... |
| CVE-2022-36293 | HIGH | 7.2 | 1.0% | Aug 16, 2022 | Buffer overflow vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administ... |
| CVE-2022-35734 | HIGH | 7.5 | 0.6% | Aug 16, 2022 | 'Hulu / フールー' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an externa... |
| CVE-2022-35239 | HIGH | 8.8 | 1.2% | Aug 16, 2022 | The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and ea... |
| CVE-2022-34156 | MEDIUM | 4.8 | 0.2% | Aug 16, 2022 | 'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker ... |
| CVE-2022-33939 | HIGH | 7.5 | 1.0% | Aug 16, 2022 | CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication p... |
| CVE-2022-38216 | HIGH | 7.5 | 0.7% | Aug 16, 2022 | An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with mu... |
| CVE-2022-36312 | HIGH | 8.8 | 0.3% | Aug 16, 2022 | Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This i... |
| CVE-2022-36311 | MEDIUM | 6.1 | 0.4% | Aug 16, 2022 | Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP c... |
| CVE-2022-36310 | HIGH | 8.8 | 1.3% | Aug 16, 2022 | Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, e... |
| CVE-2022-36309 | HIGH | 8.8 | 24.1% | Aug 16, 2022 | Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the Act... |
| CVE-2022-36308 | CRITICAL | 9.1 | 0.6% | Aug 16, 2022 | Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.... |
| CVE-2022-36307 | MEDIUM | 6.8 | 0.3% | Aug 16, 2022 | The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in Air... |
| CVE-2022-36306 | MEDIUM | 6.5 | 0.8% | Aug 16, 2022 | An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS pri... |
| CVE-2022-24952 | MEDIUM | 6.5 | 1.3% | Aug 16, 2022 | Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered re... |
| CVE-2022-24951 | HIGH | 7 | 0.3% | Aug 16, 2022 | A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Termi... |
| CVE-2022-24950 | HIGH | 7.5 | 1.0% | Aug 16, 2022 | A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other... |
| CVE-2022-24949 | HIGH | 7.5 | 0.9% | Aug 16, 2022 | A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a ra... |
| CVE-2022-38359 | HIGH | 8.8 | 0.4% | Aug 15, 2022 | Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of ... |
| CVE-2022-38358 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cro... |
| CVE-2022-38357 | HIGH | 8.8 | 0.9% | Aug 15, 2022 | Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection... |
| CVE-2022-2817 | HIGH | 7.8 | 0.5% | Aug 15, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0213. |
| CVE-2022-28756 | HIGH | 7.8 | 0.2% | Aug 15, 2022 | The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contain... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now