2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39959 | HIGH | 7.8 | 0.6% | Oct 7, 2022 | Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini fol... |
| CVE-2022-41574 | HIGH | 7.5 | 0.6% | Oct 7, 2022 | An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups ... |
| CVE-2022-3276 | HIGH | 8.8 | 1.6% | Oct 7, 2022 | Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to explo... |
| CVE-2022-39289 | HIGH | 7.5 | 0.8% | Oct 7, 2022 | ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder AP... |
| CVE-2022-36634 | HIGH | 8.8 | 1.3% | Oct 7, 2022 | An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a c... |
| CVE-2022-32591 | HIGH | 7.5 | 0.6% | Oct 7, 2022 | In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service w... |
| CVE-2022-32589 | HIGH | 7.5 | 0.6% | Oct 7, 2022 | In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to rem... |
| CVE-2022-26472 | HIGH | 7.8 | 0.1% | Oct 7, 2022 | In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation... |
| CVE-2022-26471 | HIGH | 7.8 | 0.1% | Oct 7, 2022 | In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local esca... |
| CVE-2022-42074 | HIGH | 7.2 | 0.7% | Oct 7, 2022 | Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=. |
| CVE-2022-42073 | HIGH | 7.2 | 0.7% | Oct 7, 2022 | Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=. |
| CVE-2022-41379 | HIGH | 7.2 | 0.9% | Oct 7, 2022 | An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Managemen... |
| CVE-2022-41378 | HIGH | 7.2 | 0.7% | Oct 7, 2022 | Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/ad... |
| CVE-2022-41377 | HIGH | 7.2 | 0.7% | Oct 7, 2022 | Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/ad... |
| CVE-2022-37893 | HIGH | 7.8 | 0.8% | Oct 7, 2022 | An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Su... |
| CVE-2022-42092 | HIGH | 7.2 | 1.5% | Oct 7, 2022 | Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Executi... |
| CVE-2022-41515 | HIGH | 7.2 | 0.7% | Oct 7, 2022 | Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at... |
| CVE-2022-41514 | HIGH | 7.2 | 0.7% | Oct 7, 2022 | Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at... |
| CVE-2022-41513 | HIGH | 7.2 | 0.7% | Oct 7, 2022 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete... |
| CVE-2022-41512 | HIGH | 7.2 | 0.9% | Oct 7, 2022 | An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management Sys... |
| CVE-2022-22493 | HIGH | 8.8 | 0.3% | Oct 7, 2022 | IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by imp... |
| CVE-2022-22480 | HIGH | 7.5 | 0.7% | Oct 7, 2022 | IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could res... |
| CVE-2022-39871 | HIGH | 7.5 | 0.3% | Oct 7, 2022 | Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows atta... |
| CVE-2022-39870 | HIGH | 7.5 | 0.3% | Oct 7, 2022 | Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows atta... |
| CVE-2022-39869 | HIGH | 7.5 | 0.3% | Oct 7, 2022 | Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows atta... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now