2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-37001 | HIGH | 7.5 | 0.5% | Aug 10, 2022 | The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitatio... |
| CVE-2022-36923 | HIGH | 7.5 | 7.9% | Aug 10, 2022 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall An... |
| CVE-2022-36750 | CRITICAL | 9.8 | 0.8% | Aug 10, 2022 | Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update_user.php?id=. |
| CVE-2022-36270 | CRITICAL | 9.8 | 1.1% | Aug 10, 2022 | Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php. |
| CVE-2022-35697 | MEDIUM | 5.4 | 0.6% | Aug 10, 2022 | Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cross-Site Scripting (X... |
| CVE-2022-35538 | CRITICAL | 9.8 | 2.2% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al... |
| CVE-2022-35537 | CRITICAL | 9.8 | 2.2% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, wh... |
| CVE-2022-35536 | CRITICAL | 9.8 | 2.2% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, w... |
| CVE-2022-35535 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to ... |
| CVE-2022-35534 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G... |
| CVE-2022-35533 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which... |
| CVE-2022-35526 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command... |
| CVE-2022-35525 | CRITICAL | 9.8 | 2.4% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to co... |
| CVE-2022-35524 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, ... |
| CVE-2022-35523 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter fl... |
| CVE-2022-35522 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, r... |
| CVE-2022-35521 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnable... |
| CVE-2022-35520 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden ... |
| CVE-2022-35519 | CRITICAL | 9.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to ... |
| CVE-2022-35518 | CRITICAL | 9.8 | 1.5% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, whic... |
| CVE-2022-35517 | HIGH | 8.8 | 2.3% | Aug 10, 2022 | WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wl... |
| CVE-2022-35509 | MEDIUM | 5.4 | 0.5% | Aug 10, 2022 | An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute ar... |
| CVE-2022-35491 | CRITICAL | 9.8 | 0.7% | Aug 10, 2022 | TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample. |
| CVE-2022-35426 | CRITICAL | 9.8 | 0.9% | Aug 10, 2022 | UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file. |
| CVE-2022-35293 | CRITICAL | 9.1 | 0.6% | Aug 10, 2022 | Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now