2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-33319CRITICAL9.1Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics...
CVE-2022-33318CRITICAL9.8Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi E...
CVE-2022-33317HIGH7.8Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 t...
CVE-2022-33316HIGH7.8Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi E...
CVE-2022-33315HIGH7.8Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi E...
CVE-2022-29834HIGH7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENE...
CVE-2022-34150MEDIUM5.4The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerability on end...
CVE-2022-33944MEDIUM6.5The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on en...
CVE-2022-2199MEDIUM6.1The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an att...
CVE-2022-2179MEDIUM6.5The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in th...
CVE-2022-2141CRITICAL9.8SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.
CVE-2022-2107CRITICAL9.8The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-coded master ...
CVE-2022-1766HIGH7.5Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. ...
CVE-2022-1264HIGH8.8The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code.
CVE-2022-22221HIGH7.8An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS on SRX...
CVE-2022-22217MEDIUM6.5An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N...
CVE-2022-22216MEDIUM4.3An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks Junos OS on P...
CVE-2022-22215MEDIUM5.5A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module ...
CVE-2022-22214MEDIUM6.5An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos ...
CVE-2022-22213MEDIUM5.9A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos O...
CVE-2022-22212HIGH7.5An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper N...
CVE-2022-22210MEDIUM6.5A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 S...
CVE-2022-22209HIGH7.5A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an ...
CVE-2022-22207HIGH7.5A Use After Free vulnerability in the Advanced Forwarding Toolkit (AFT) manager process (aftmand) of Juniper Networks Ju...
CVE-2022-22206HIGH7.5A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now