2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38833 | HIGH | 7.2 | 0.8% | Sep 16, 2022 | School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent... |
| CVE-2022-38832 | HIGH | 7.2 | 0.9% | Sep 16, 2022 | School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department... |
| CVE-2022-3176 | HIGH | 7.8 | 0.3% | Sep 16, 2022 | There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose l... |
| CVE-2022-38844 | HIGH | 8 | 1.1% | Sep 16, 2022 | CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating ... |
| CVE-2022-38843 | HIGH | 8.8 | 1.1% | Sep 16, 2022 | EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any ext... |
| CVE-2022-38808 | HIGH | 8.8 | 0.7% | Sep 16, 2022 | ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface. |
| CVE-2022-40152 | HIGH | 7.5 | 19.7% | Sep 16, 2022 | Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. I... |
| CVE-2022-40151 | HIGH | 7.5 | 1.0% | Sep 16, 2022 | Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running ... |
| CVE-2022-40150 | HIGH | 7.5 | 1.2% | Sep 16, 2022 | Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the pa... |
| CVE-2022-40149 | HIGH | 7.5 | 1.2% | Sep 16, 2022 | Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the pa... |
| CVE-2022-2798 | HIGH | 8 | 0.9% | Sep 16, 2022 | The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could all... |
| CVE-2022-1194 | HIGH | 8.8 | 1.0% | Sep 16, 2022 | The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting... |
| CVE-2022-25706 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdr... |
| CVE-2022-25696 | HIGH | 7 | 0.1% | Sep 16, 2022 | Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Sna... |
| CVE-2022-25693 | HIGH | 7.8 | 0.1% | Sep 16, 2022 | Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobi... |
| CVE-2022-25690 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Sna... |
| CVE-2022-25670 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Sn... |
| CVE-2022-25669 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdr... |
| CVE-2022-25656 | HIGH | 7.8 | 0.1% | Sep 16, 2022 | Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when ... |
| CVE-2022-25652 | HIGH | 7.8 | 0.1% | Sep 16, 2022 | Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking |
| CVE-2022-22095 | HIGH | 7.8 | 0.1% | Sep 16, 2022 | Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles with... |
| CVE-2022-22094 | HIGH | 7 | 0.1% | Sep 16, 2022 | memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Conn... |
| CVE-2022-22093 | HIGH | 7 | 0.1% | Sep 16, 2022 | Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach ... |
| CVE-2022-22092 | HIGH | 7.8 | 0.1% | Sep 16, 2022 | Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indus... |
| CVE-2022-22091 | HIGH | 7.5 | 0.4% | Sep 16, 2022 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapd... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now