2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2973 | HIGH | 7.5 | 0.8% | Sep 23, 2022 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10... |
| CVE-2022-2971 | HIGH | 7.5 | 0.8% | Sep 23, 2022 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10... |
| CVE-2022-40861 | HIGH | 7.2 | 0.9% | Sep 23, 2022 | Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with... |
| CVE-2022-38085 | HIGH | 8.8 | 0.3% | Sep 23, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Read more By Adam plugin <= 1.1.8 at WordPress. |
| CVE-2022-36388 | HIGH | 8.8 | 0.3% | Sep 23, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in YDS Support Ticket System plugin <= 1.0 at WordPress. |
| CVE-2022-40093 | HIGH | 7.2 | 0.9% | Sep 23, 2022 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet... |
| CVE-2022-40092 | HIGH | 7.2 | 0.9% | Sep 23, 2022 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet... |
| CVE-2022-40091 | HIGH | 7.2 | 0.9% | Sep 23, 2022 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet... |
| CVE-2022-36798 | HIGH | 8.8 | 0.3% | Sep 23, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin <= 4.2.... |
| CVE-2022-35257 | HIGH | 7.8 | 0.2% | Sep 23, 2022 | A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious a... |
| CVE-2022-27492 | HIGH | 7.8 | 0.5% | Sep 23, 2022 | An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. |
| CVE-2022-2347 | HIGH | 7.1 | 0.6% | Sep 23, 2022 | There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DF... |
| CVE-2022-2566 | HIGH | 7.8 | 0.6% | Sep 23, 2022 | A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points... |
| CVE-2022-38936 | HIGH | 7.5 | 0.7% | Sep 23, 2022 | An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function pbc_wmessage_integer in src/wmes... |
| CVE-2022-39238 | HIGH | 8.8 | 0.4% | Sep 23, 2022 | Arvados is an open source platform for managing and analyzing biomedical big data. In versions prior to 2.4.3, when usin... |
| CVE-2022-41322 | HIGH | 7.8 | 0.5% | Sep 23, 2022 | In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code e... |
| CVE-2022-40298 | HIGH | 8.8 | 0.6% | Sep 23, 2022 | Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation ... |
| CVE-2022-30426 | HIGH | 7.8 | 0.4% | Sep 23, 2022 | There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some ... |
| CVE-2022-37234 | HIGH | 7.8 | 0.5% | Sep 22, 2022 | Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow... |
| CVE-2022-34026 | HIGH | 7.5 | 1.5% | Sep 22, 2022 | ICEcoder v8.1 allows attackers to execute a directory traversal. |
| CVE-2022-40935 | HIGH | 7.2 | 0.8% | Sep 22, 2022 | Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,id. |
| CVE-2022-40934 | HIGH | 7.2 | 0.8% | Sep 22, 2022 | Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_category,id |
| CVE-2022-40933 | HIGH | 7.2 | 0.8% | Sep 22, 2022 | Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_order,... |
| CVE-2022-40932 | HIGH | 7.2 | 0.9% | Sep 22, 2022 | In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "galle... |
| CVE-2022-35408 | HIGH | 8.2 | 0.3% | Sep 22, 2022 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now