2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-40692HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in WP Sunshine Sunshine Photo Cart plugin <= 2.9.13 versions.
CVE-2022-36401HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in TeraWallet – For WooCommerce plugin <= 1.3.24 versions.
CVE-2022-46604HIGH8.8An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanis...
CVE-2022-46552HIGH8.8D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan...
CVE-2022-46965HIGH8.8PrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability.
CVE-2022-40269HIGH8.1Authentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01...
CVE-2022-33323HIGH7.5Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Seri...
CVE-2022-47872HIGH8.8A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbit...
CVE-2022-45782HIGH8.8An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure ...
CVE-2022-31364HIGH8.8Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Over...
CVE-2022-31363HIGH8.8Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Over...
CVE-2022-30904HIGH8.8In Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer overflow vulnerability can be triggered during provisioning, b...
CVE-2022-4254HIGH8.8sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVE-2022-48093HIGH7.2Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php...
CVE-2022-47717HIGH7.5Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).
CVE-2022-3990HIGH7.8HPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on July 29th, 2022. Customer...
CVE-2022-27538HIGH7A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC produc...
CVE-2022-27537HIGH7.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary...
CVE-2022-23455HIGH7.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege...
CVE-2022-23454HIGH7.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege...
CVE-2022-23453HIGH7.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege...
CVE-2022-46679HIGH7.5 Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthent...
CVE-2022-45099HIGH7.8 Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged lo...
CVE-2022-34403HIGH8.8 Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploi...
CVE-2022-34398HIGH7 Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potential...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now