2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-2488CRITICAL9.8A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown pro...
CVE-2022-2487CRITICAL9.8A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unk...
CVE-2022-2486CRITICAL9.8A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown par...
CVE-2022-31250HIGH7.8A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escal...
CVE-2022-34866HIGH7.8Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verifica...
CVE-2022-33967HIGH7.8squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer ove...
CVE-2022-32962MEDIUM6.8HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker c...
CVE-2022-32961MEDIUM6.8HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC...
CVE-2022-32960MEDIUM6.8HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC...
CVE-2022-32959MEDIUM6.8HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC...
CVE-2022-32958MEDIUM6.5A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size ...
CVE-2022-32458HIGH7.5Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An un...
CVE-2022-32457MEDIUM5.3Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack...
CVE-2022-32456CRITICAL9.8Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitra...
CVE-2022-21586MEDIUM6.4Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastr...
CVE-2022-21585MEDIUM6.7Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastr...
CVE-2022-21584MEDIUM6.4Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastr...
CVE-2022-21583MEDIUM6.4Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastr...
CVE-2022-21582MEDIUM6.7Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastr...
CVE-2022-21581MEDIUM5.9Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastr...
CVE-2022-21580MEDIUM5.9Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Appli...
CVE-2022-21579MEDIUM6.4Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Inf...
CVE-2022-21578MEDIUM6.7Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Inf...
CVE-2022-21577MEDIUM6.4Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Inf...
CVE-2022-21576MEDIUM6.4Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Inf...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now