2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29980 | CRITICAL | 9.8 | 1.6% | May 12, 2022 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=. |
| CVE-2022-29979 | CRITICAL | 9.8 | 1.6% | May 12, 2022 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation. |
| CVE-2022-29751 | CRITICAL | 9.8 | 1.6% | May 12, 2022 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client. |
| CVE-2022-29750 | CRITICAL | 9.8 | 1.6% | May 12, 2022 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service. |
| CVE-2022-29749 | CRITICAL | 9.8 | 1.6% | May 12, 2022 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice. |
| CVE-2022-29748 | CRITICAL | 9.8 | 1.6% | May 12, 2022 | Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=. |
| CVE-2022-29747 | CRITICAL | 9.8 | 1.6% | May 12, 2022 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Le... |
| CVE-2022-29539 | CRITICAL | 9.8 | 1.7% | May 12, 2022 | resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sen... |
| CVE-2022-30525 | CRITICAL | 9.8 | 99.9% | May 12, 2022 | A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat... |
| CVE-2022-1650 | CRITICAL | 9.3 | 1.7% | May 12, 2022 | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior ... |
| CVE-2022-30592 | CRITICAL | 9.8 | 3.2% | May 11, 2022 | liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY. |
| CVE-2022-29596 | CRITICAL | 9.8 | 2.0% | May 11, 2022 | MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the U... |
| CVE-2022-30450 | CRITICAL | 9.8 | 20.0% | May 11, 2022 | A Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php |
| CVE-2022-30449 | CRITICAL | 9.8 | 1.6% | May 11, 2022 | Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via... |
| CVE-2022-30448 | CRITICAL | 9.8 | 1.9% | May 11, 2022 | Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in tr... |
| CVE-2022-30063 | CRITICAL | 9.8 | 16.6% | May 11, 2022 | ftcms <=2.1 was discovered to be vulnerable to code execution attacks . |
| CVE-2022-30453 | CRITICAL | 9.8 | 14.5% | May 11, 2022 | ShopWind <= 3.4.2 has a RCE vulnerability in Database.php |
| CVE-2022-30048 | CRITICAL | 9.8 | 1.4% | May 11, 2022 | Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter... |
| CVE-2022-30047 | CRITICAL | 9.8 | 1.4% | May 11, 2022 | Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderB... |
| CVE-2022-29898 | CRITICAL | 9.1 | 0.6% | May 11, 2022 | On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the We... |
| CVE-2022-29897 | CRITICAL | 9.1 | 1.2% | May 11, 2022 | On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the ... |
| CVE-2022-29009 | CRITICAL | 9.8 | 21.3% | May 11, 2022 | Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Managem... |
| CVE-2022-29007 | CRITICAL | 9.8 | 18.3% | May 11, 2022 | Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Ma... |
| CVE-2022-29006 | CRITICAL | 9.8 | 18.3% | May 11, 2022 | Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Manageme... |
| CVE-2022-29656 | CRITICAL | 9.8 | 0.9% | May 11, 2022 | Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now