2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29784 | MEDIUM | 5.3 | 1.1% | Jun 3, 2022 | PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirec... |
| CVE-2022-29778 | HIGH | 8.8 | 2.5% | Jun 3, 2022 | D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the param... |
| CVE-2022-29773 | MEDIUM | 6.5 | 0.7% | Jun 3, 2022 | An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and be... |
| CVE-2022-29770 | MEDIUM | 5.4 | 0.5% | Jun 3, 2022 | XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo. |
| CVE-2022-26493 | HIGH | 8.8 | 0.5% | Jun 3, 2022 | Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorizati... |
| CVE-2022-1988 | MEDIUM | 6.1 | 0.7% | Jun 3, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09. |
| CVE-2022-1987 | HIGH | 8.1 | 0.8% | Jun 3, 2022 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
| CVE-2022-32271 | CRITICAL | 9.6 | 2.7% | Jun 3, 2022 | In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL ... |
| CVE-2022-32270 | CRITICAL | 9.8 | 4.3% | Jun 3, 2022 | In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Trave... |
| CVE-2022-32269 | CRITICAL | 9.8 | 3.2% | Jun 3, 2022 | In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (display... |
| CVE-2022-32268 | HIGH | 8.8 | 2.1% | Jun 3, 2022 | StarWind SAN and NAS v0.2 build 1914 allow remote code execution. A flaw was found in REST API in StarWind Stack. REST c... |
| CVE-2022-32265 | MEDIUM | 5.3 | 1.2% | Jun 3, 2022 | qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding. |
| CVE-2022-29767 | MEDIUM | 6.5 | 0.9% | Jun 3, 2022 | adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a ... |
| CVE-2022-30238 | HIGH | 8.8 | 0.9% | Jun 2, 2022 | A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when... |
| CVE-2022-30237 | HIGH | 7.5 | 0.3% | Jun 2, 2022 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be r... |
| CVE-2022-30236 | HIGH | 8.2 | 0.7% | Jun 2, 2022 | A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an... |
| CVE-2022-30235 | CRITICAL | 9.8 | 0.9% | Jun 2, 2022 | A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized ... |
| CVE-2022-30234 | CRITICAL | 9.8 | 1.1% | Jun 2, 2022 | A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root l... |
| CVE-2022-30233 | MEDIUM | 6.5 | 0.7% | Jun 2, 2022 | A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated when... |
| CVE-2022-30232 | HIGH | 8.8 | 1.1% | Jun 2, 2022 | A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attack... |
| CVE-2022-29594 | HIGH | 7.8 | 0.3% | Jun 2, 2022 | eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM. |
| CVE-2022-31463 | HIGH | 7.1 | 1.0% | Jun 2, 2022 | Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authenticatio... |
| CVE-2022-31462 | HIGH | 8.8 | 0.8% | Jun 2, 2022 | Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial nu... |
| CVE-2022-31461 | MEDIUM | 6.5 | 0.8% | Jun 2, 2022 | Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 messag... |
| CVE-2022-31460 | HIGH | 7.4 | 3.4% | Jun 2, 2022 | Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a cer... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now