2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34595 | CRITICAL | 9.8 | 2.6% | Jul 6, 2022 | Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status. |
| CVE-2022-26348 | MEDIUM | 5.5 | 0.3% | Jul 6, 2022 | Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Wi... |
| CVE-2022-26078 | HIGH | 7.5 | 0.8% | Jul 6, 2022 | Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP ad... |
| CVE-2022-33738 | HIGH | 7.5 | 0.8% | Jul 6, 2022 | OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal |
| CVE-2022-33737 | HIGH | 7.5 | 0.7% | Jul 6, 2022 | The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.... |
| CVE-2022-30929 | HIGH | 8.8 | 1.5% | Jul 6, 2022 | Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper. |
| CVE-2022-30619 | HIGH | 8.8 | 0.6% | Jul 6, 2022 | Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in... |
| CVE-2022-23714 | HIGH | 7.8 | 0.2% | Jul 6, 2022 | A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security... |
| CVE-2022-23713 | MEDIUM | 6.1 | 0.7% | Jul 6, 2022 | A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitr... |
| CVE-2022-23173 | MEDIUM | 6.3 | 0.5% | Jul 6, 2022 | this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs t... |
| CVE-2022-23172 | MEDIUM | 4.3 | 0.4% | Jul 6, 2022 | An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would... |
| CVE-2022-21787 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation... |
| CVE-2022-21786 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of priv... |
| CVE-2022-21785 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2022-21784 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2022-21783 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2022-21782 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2022-21781 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2022-21780 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2022-21779 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2022-21777 | HIGH | 7.8 | 0.1% | Jul 6, 2022 | In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalatio... |
| CVE-2022-21776 | MEDIUM | 6.4 | 0.1% | Jul 6, 2022 | In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit... |
| CVE-2022-21775 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of priv... |
| CVE-2022-21774 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi... |
| CVE-2022-21773 | MEDIUM | 6.7 | 0.1% | Jul 6, 2022 | In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now