2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-40313 | HIGH | 7.1 | 0.5% | Sep 30, 2022 | Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a ... |
| CVE-2022-40277 | HIGH | 7.8 | 0.5% | Sep 30, 2022 | Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link ... |
| CVE-2022-40274 | HIGH | 7.8 | 0.4% | Sep 30, 2022 | Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a m... |
| CVE-2022-36961 | HIGH | 8.8 | 75.2% | Sep 30, 2022 | A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this ... |
| CVE-2022-41440 | HIGH | 7.2 | 0.7% | Sep 30, 2022 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventor... |
| CVE-2022-41439 | HIGH | 7.2 | 0.7% | Sep 30, 2022 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventor... |
| CVE-2022-41437 | HIGH | 7.2 | 1.3% | Sep 30, 2022 | Billing System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php... |
| CVE-2022-3371 | HIGH | 7.5 | 1.0% | Sep 30, 2022 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. |
| CVE-2022-2529 | HIGH | 7.5 | 0.8% | Sep 30, 2022 | sflow decode package does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attack... |
| CVE-2022-24373 | HIGH | 7.5 | 1.2% | Sep 30, 2022 | The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due... |
| CVE-2022-21222 | HIGH | 7.5 | 1.4% | Sep 30, 2022 | The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of ins... |
| CVE-2022-41828 | HIGH | 8.1 | 1.5% | Sep 29, 2022 | In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Facto... |
| CVE-2022-3364 | HIGH | 7.5 | 1.0% | Sep 29, 2022 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. |
| CVE-2022-40472 | HIGH | 8 | 0.9% | Sep 29, 2022 | ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vu... |
| CVE-2022-36066 | HIGH | 7.2 | 1.6% | Sep 29, 2022 | Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.be... |
| CVE-2022-39168 | HIGH | 7.5 | 0.7% | Sep 29, 2022 | IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID... |
| CVE-2022-39252 | HIGH | 7.5 | 0.5% | Sep 29, 2022 | matrix-rust-sdk is an implementation of a Matrix client-server library in Rust, and matrix-sdk-crypto is the Matrix encr... |
| CVE-2022-38732 | HIGH | 7.5 | 0.6% | Sep 29, 2022 | SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain typ... |
| CVE-2022-40407 | HIGH | 8.8 | 1.2% | Sep 29, 2022 | A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a c... |
| CVE-2022-40890 | HIGH | 7.5 | 0.9% | Sep 29, 2022 | A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service. |
| CVE-2022-39250 | HIGH | 7.5 | 0.9% | Sep 29, 2022 | Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript. Prior to version 19.7.0... |
| CVE-2022-40126 | HIGH | 7.8 | 0.3% | Sep 29, 2022 | A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privi... |
| CVE-2022-3352 | HIGH | 7.8 | 0.5% | Sep 29, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0614. |
| CVE-2022-40279 | HIGH | 7.5 | 1.1% | Sep 29, 2022 | An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). l2_packet_receive_timeout in wpa_supplicant/sr... |
| CVE-2022-40278 | HIGH | 7.5 | 1.3% | Sep 29, 2022 | An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisio... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now