2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39868 | HIGH | 7.5 | 0.3% | Oct 7, 2022 | Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to ... |
| CVE-2022-39867 | HIGH | 7.5 | 0.3% | Oct 7, 2022 | Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows atta... |
| CVE-2022-39866 | HIGH | 7.5 | 0.3% | Oct 7, 2022 | Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attacke... |
| CVE-2022-39865 | HIGH | 7.5 | 0.3% | Oct 7, 2022 | Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attac... |
| CVE-2022-39864 | HIGH | 7.5 | 0.3% | Oct 7, 2022 | Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attacker... |
| CVE-2022-39858 | HIGH | 7.8 | 0.2% | Oct 7, 2022 | Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write a... |
| CVE-2022-39854 | HIGH | 7.8 | 0.1% | Oct 7, 2022 | Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory. |
| CVE-2022-39853 | HIGH | 7.8 | 0.1% | Oct 7, 2022 | A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access... |
| CVE-2022-39852 | HIGH | 7.8 | 0.1% | Oct 7, 2022 | A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release ... |
| CVE-2022-33896 | HIGH | 7.8 | 0.5% | Oct 7, 2022 | A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based offi... |
| CVE-2022-3422 | HIGH | 7.5 | 0.8% | Oct 7, 2022 | Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when ... |
| CVE-2022-41672 | HIGH | 8.1 | 1.2% | Oct 7, 2022 | In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being... |
| CVE-2022-41355 | HIGH | 7.2 | 0.8% | Oct 6, 2022 | Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /lea... |
| CVE-2022-27810 | HIGH | 7.5 | 0.7% | Oct 6, 2022 | It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciousl... |
| CVE-2022-41528 | HIGH | 8.8 | 0.9% | Oct 6, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter... |
| CVE-2022-41527 | HIGH | 8.8 | 0.9% | Oct 6, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser para... |
| CVE-2022-41526 | HIGH | 8.8 | 0.9% | Oct 6, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter i... |
| CVE-2022-41524 | HIGH | 8.8 | 0.9% | Oct 6, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, a... |
| CVE-2022-41523 | HIGH | 8.8 | 0.9% | Oct 6, 2022 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parame... |
| CVE-2022-42457 | HIGH | 7.2 | 2.2% | Oct 6, 2022 | Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update... |
| CVE-2022-42250 | HIGH | 7.2 | 0.8% | Oct 6, 2022 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=... |
| CVE-2022-42249 | HIGH | 7.2 | 0.9% | Oct 6, 2022 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=. |
| CVE-2022-42243 | HIGH | 7.2 | 0.9% | Oct 6, 2022 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id... |
| CVE-2022-42242 | HIGH | 7.2 | 0.9% | Oct 6, 2022 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking. |
| CVE-2022-42241 | HIGH | 7.2 | 0.9% | Oct 6, 2022 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now