2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25394 | CRITICAL | 9.8 | 1.5% | Mar 2, 2022 | Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under... |
| CVE-2022-25393 | HIGH | 7.5 | 1.2% | Mar 2, 2022 | Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter. |
| CVE-2022-25115 | HIGH | 7.8 | 1.5% | Mar 2, 2022 | A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners C... |
| CVE-2022-25114 | MEDIUM | 6.1 | 0.7% | Mar 2, 2022 | Event Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the full_name p... |
| CVE-2022-24722 | MEDIUM | 6.1 | 1.1% | Mar 2, 2022 | VIewComponent is a framework for building view components in Ruby on Rails. Versions prior to 2.31.2 and 2.49.1 contain ... |
| CVE-2022-23958 | MEDIUM | 5.5 | 0.3% | Mar 2, 2022 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
| CVE-2022-23957 | MEDIUM | 5.5 | 0.3% | Mar 2, 2022 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
| CVE-2022-23955 | MEDIUM | 5.5 | 0.3% | Mar 2, 2022 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
| CVE-2022-23954 | MEDIUM | 5.5 | 0.3% | Mar 2, 2022 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
| CVE-2022-0711 | HIGH | 7.5 | 16.2% | Mar 2, 2022 | A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow ... |
| CVE-2022-25045 | CRITICAL | 9.8 | 1.3% | Mar 2, 2022 | Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to ... |
| CVE-2022-23956 | MEDIUM | 5.5 | 0.3% | Mar 2, 2022 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
| CVE-2022-23953 | MEDIUM | 5.5 | 0.3% | Mar 2, 2022 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
| CVE-2022-23656 | MEDIUM | 5.4 | 0.5% | Mar 2, 2022 | Zulip is an open source team chat app. The `main` development branch of Zulip Server from June 2021 and later is vulnera... |
| CVE-2022-22944 | MEDIUM | 5.4 | 0.4% | Mar 2, 2022 | VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to insufficient sanitization ... |
| CVE-2022-0675 | CRITICAL | 9.8 | 0.9% | Mar 2, 2022 | In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as th... |
| CVE-2022-23640 | CRITICAL | 9.8 | 1.4% | Mar 2, 2022 | Excel-Streaming-Reader is an easy-to-use implementation of a streaming Excel reader using Apache POI. Prior to xlsx-stre... |
| CVE-2022-23878 | CRITICAL | 9.8 | 2.1% | Mar 2, 2022 | seacms V11.5 is affected by an arbitrary code execution vulnerability in admin_config.php. |
| CVE-2022-25016 | CRITICAL | 9.8 | 1.9% | Mar 2, 2022 | Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the c... |
| CVE-2022-22350 | MEDIUM | 5.5 | 0.2% | Mar 2, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a... |
| CVE-2022-0819 | HIGH | 8.8 | 43.6% | Mar 2, 2022 | Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1. |
| CVE-2022-25634 | HIGH | 7.5 | 1.9% | Mar 2, 2022 | Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. |
| CVE-2022-24447 | MEDIUM | 6.5 | 0.9% | Mar 2, 2022 | An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a... |
| CVE-2022-24306 | CRITICAL | 9.8 | 2.4% | Mar 2, 2022 | Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled. |
| CVE-2022-24305 | CRITICAL | 9.8 | 2.7% | Mar 2, 2022 | Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege esc... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now