2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43063 | HIGH | 7.2 | 0.7% | Nov 3, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43062 | HIGH | 7.2 | 0.7% | Nov 3, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43061 | HIGH | 7.2 | 0.9% | Nov 3, 2022 | Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the co... |
| CVE-2022-42745 | HIGH | 7.5 | 0.8% | Nov 3, 2022 | CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because th... |
| CVE-2022-35717 | HIGH | 7.8 | 0.6% | Nov 3, 2022 | "IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on th... |
| CVE-2022-30608 | HIGH | 8.8 | 0.3% | Nov 3, 2022 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exe... |
| CVE-2022-25952 | HIGH | 8.8 | 0.3% | Nov 3, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Keywordrush Content Egg plugin <= 5.4.0 on WordPress. |
| CVE-2022-3258 | HIGH | 8.8 | 0.2% | Nov 3, 2022 | Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentic... |
| CVE-2022-42751 | HIGH | 8.8 | 0.4% | Nov 3, 2022 | CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because t... |
| CVE-2022-42750 | HIGH | 8.8 | 1.0% | Nov 3, 2022 | CandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users. This is possible because the... |
| CVE-2022-3776 | HIGH | 8.8 | 0.5% | Nov 3, 2022 | The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Cross-Site Request ... |
| CVE-2022-44624 | HIGH | 7.5 | 0.5% | Nov 3, 2022 | In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained sp... |
| CVE-2022-44623 | HIGH | 7.5 | 0.5% | Nov 3, 2022 | In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner setting... |
| CVE-2022-39234 | HIGH | 8.8 | 0.4% | Nov 3, 2022 | GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that pr... |
| CVE-2022-32287 | HIGH | 7.5 | 1.6% | Nov 3, 2022 | A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows ... |
| CVE-2022-44638 | HIGH | 8.8 | 1.4% | Nov 3, 2022 | In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edge... |
| CVE-2022-3181 | HIGH | 7.5 | 0.7% | Nov 2, 2022 | An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifically malform... |
| CVE-2022-43068 | HIGH | 7.2 | 0.7% | Nov 2, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43066 | HIGH | 7.2 | 0.8% | Nov 2, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43227 | HIGH | 7.2 | 0.7% | Nov 2, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-43226 | HIGH | 8.8 | 0.8% | Nov 2, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-39356 | HIGH | 8.8 | 0.6% | Nov 2, 2022 | Discourse is a platform for community discussion. Users who receive an invitation link that is not scoped to a single em... |
| CVE-2022-41716 | HIGH | 7.5 | 0.8% | Nov 2, 2022 | Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.Sta... |
| CVE-2022-41551 | HIGH | 7.2 | 0.8% | Nov 2, 2022 | Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/ed... |
| CVE-2022-43995 | HIGH | 7.1 | 0.3% | Nov 2, 2022 | Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-boun... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now