2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32450 | HIGH | 7.1 | 0.5% | Jul 18, 2022 | AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own ... |
| CVE-2022-30627 | HIGH | 7.5 | 0.3% | Jul 18, 2022 | This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104... |
| CVE-2022-30626 | HIGH | 7.5 | 0.2% | Jul 18, 2022 | Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component, ... |
| CVE-2022-30625 | MEDIUM | 5.3 | 0.3% | Jul 18, 2022 | Directory listing is a web server function that displays the directory contents when there is no index file in a specifi... |
| CVE-2022-30624 | HIGH | 7.5 | 0.3% | Jul 18, 2022 | Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password. |
| CVE-2022-30623 | CRITICAL | 9.8 | 0.3% | Jul 18, 2022 | The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status... |
| CVE-2022-30621 | MEDIUM | 6.5 | 0.6% | Jul 18, 2022 | Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS a... |
| CVE-2022-30620 | HIGH | 8.8 | 0.4% | Jul 18, 2022 | On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" priv... |
| CVE-2022-24692 | MEDIUM | 5.4 | 0.5% | Jul 18, 2022 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the general Parameters page ... |
| CVE-2022-24691 | HIGH | 7.1 | 0.8% | Jul 18, 2022 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated user... |
| CVE-2022-24690 | HIGH | 8.2 | 1.0% | Jul 18, 2022 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection vulnerability allows unauth... |
| CVE-2022-24689 | MEDIUM | 5.3 | 0.8% | Jul 18, 2022 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote atta... |
| CVE-2022-24688 | HIGH | 8.8 | 2.7% | Jul 18, 2022 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The Touch settings allow unrestricted file upload (and ... |
| CVE-2022-36127 | HIGH | 7.5 | 1.6% | Jul 18, 2022 | A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has ... |
| CVE-2022-33891 | HIGH | 8.8 | 93.0% | Jul 18, 2022 | The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authen... |
| CVE-2022-27434 | CRITICAL | 9.8 | 1.1% | Jul 18, 2022 | UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileN... |
| CVE-2022-33903 | HIGH | 7.5 | 1.1% | Jul 17, 2022 | Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation. |
| CVE-2022-32985 | CRITICAL | 9.8 | 1.1% | Jul 17, 2022 | libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on ... |
| CVE-2022-31213 | HIGH | 7.5 | 1.7% | Jul 17, 2022 | An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malfo... |
| CVE-2022-31212 | HIGH | 7.5 | 1.7% | Jul 17, 2022 | An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. ... |
| CVE-2022-31211 | CRITICAL | 9.8 | 1.5% | Jul 17, 2022 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default. |
| CVE-2022-31210 | CRITICAL | 9.8 | 1.0% | Jul 17, 2022 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains ... |
| CVE-2022-31209 | CRITICAL | 9.8 | 1.2% | Jul 17, 2022 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcp... |
| CVE-2022-31208 | HIGH | 8.8 | 1.3% | Jul 17, 2022 | An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary comm... |
| CVE-2022-31202 | MEDIUM | 6.5 | 1.2% | Jul 17, 2022 | The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via e... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now