2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34575 | MEDIUM | 5.7 | 0.6% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key info... |
| CVE-2022-34574 | MEDIUM | 5.7 | 0.6% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key info... |
| CVE-2022-34573 | MEDIUM | 6.3 | 0.6% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configu... |
| CVE-2022-34572 | MEDIUM | 5.7 | 0.6% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet p... |
| CVE-2022-34571 | HIGH | 8 | 0.8% | Jul 25, 2022 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system k... |
| CVE-2022-34570 | HIGH | 7.5 | 0.8% | Jul 25, 2022 | WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the... |
| CVE-2022-35131 | CRITICAL | 9 | 2.1% | Jul 25, 2022 | Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles. |
| CVE-2022-34907 | CRITICAL | 9.8 | 15.8% | Jul 25, 2022 | An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could all... |
| CVE-2022-34906 | HIGH | 7.5 | 10.5% | Jul 25, 2022 | A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an u... |
| CVE-2022-36375 | HIGH | 7.2 | 1.0% | Jul 25, 2022 | Authenticated (high role user) WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin <= 3.6.0 at WordP... |
| CVE-2022-35873 | HIGH | 7.8 | 0.6% | Jul 25, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I... |
| CVE-2022-35872 | HIGH | 7.8 | 0.6% | Jul 25, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I... |
| CVE-2022-35871 | HIGH | 7.8 | 39.2% | Jul 25, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I... |
| CVE-2022-35870 | HIGH | 7.8 | 43.1% | Jul 25, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I... |
| CVE-2022-35869 | CRITICAL | 9.8 | 60.3% | Jul 25, 2022 | This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ig... |
| CVE-2022-34966 | HIGH | 7.5 | 1.1% | Jul 25, 2022 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via th... |
| CVE-2022-23000 | HIGH | 7.8 | 0.2% | Jul 25, 2022 | The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port... |
| CVE-2022-22999 | MEDIUM | 4.8 | 0.3% | Jul 25, 2022 | Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user ... |
| CVE-2022-35288 | MEDIUM | 6.5 | 0.6% | Jul 25, 2022 | IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in fu... |
| CVE-2022-35287 | HIGH | 7.5 | 0.5% | Jul 25, 2022 | IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, w... |
| CVE-2022-35285 | HIGH | 8.8 | 0.4% | Jul 25, 2022 | IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker t... |
| CVE-2022-35284 | HIGH | 7.5 | 0.6% | Jul 25, 2022 | IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite ... |
| CVE-2022-34962 | MEDIUM | 5.4 | 0.9% | Jul 25, 2022 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu... |
| CVE-2022-33969 | HIGH | 7.2 | 1.0% | Jul 25, 2022 | Authenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress. |
| CVE-2022-2059 | MEDIUM | 4.8 | 0.4% | Jul 25, 2022 | In Pandora FMS v7.0NG.761 and below, in the agent creation section, the alias parameter is vulnerable to a Stored Cross ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now