2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-37835 | HIGH | 7.5 | 0.6% | Sep 12, 2022 | Torguard VPN 4.8, has a vulnerability that allows an attacker to dump sensitive information, such as credentials and inf... |
| CVE-2022-36259 | HIGH | 7.5 | 0.9% | Sep 12, 2022 | A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to ex... |
| CVE-2022-36258 | HIGH | 7.5 | 0.8% | Sep 12, 2022 | A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute ... |
| CVE-2022-36257 | HIGH | 7.5 | 0.8% | Sep 12, 2022 | A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbi... |
| CVE-2022-36256 | HIGH | 7.5 | 0.8% | Sep 12, 2022 | A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbit... |
| CVE-2022-36255 | HIGH | 7.5 | 0.8% | Sep 12, 2022 | A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute ... |
| CVE-2022-34109 | HIGH | 7.1 | 0.3% | Sep 12, 2022 | An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to write arbitrary files to t... |
| CVE-2022-34108 | HIGH | 7.1 | 0.3% | Sep 12, 2022 | An issue in the Feature Navigator of Micro-Star International MSI Feature Nagivator v1.0.1808.0901 allows attackers to c... |
| CVE-2022-26049 | HIGH | 8.8 | 1.8% | Sep 11, 2022 | This affects the package com.diffplug.gradle:goomph before 3.37.2. It allows a malicious zip file to potentially break o... |
| CVE-2022-40320 | HIGH | 8.8 | 1.1% | Sep 9, 2022 | cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. |
| CVE-2022-36110 | HIGH | 8.8 | 0.7% | Sep 9, 2022 | Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged... |
| CVE-2022-31006 | HIGH | 7.5 | 0.9% | Sep 9, 2022 | indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In v... |
| CVE-2022-3133 | HIGH | 7.8 | 1.3% | Sep 9, 2022 | OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0. |
| CVE-2022-38615 | HIGH | 8.8 | 0.9% | Sep 9, 2022 | SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:j_id88, UserF... |
| CVE-2022-38614 | HIGH | 7.5 | 1.0% | Sep 9, 2022 | An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and downloa... |
| CVE-2022-28742 | HIGH | 7.5 | 0.6% | Sep 9, 2022 | aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application do... |
| CVE-2022-28741 | HIGH | 8.1 | 0.9% | Sep 9, 2022 | aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability th... |
| CVE-2022-28740 | HIGH | 7.5 | 0.6% | Sep 9, 2022 | aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Ac... |
| CVE-2022-39846 | HIGH | 7.8 | 0.2% | Sep 9, 2022 | DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.22083_3 allows attacker to execute arbitrary code. |
| CVE-2022-39845 | HIGH | 7.1 | 0.1% | Sep 9, 2022 | Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers... |
| CVE-2022-39844 | HIGH | 7.1 | 0.1% | Sep 9, 2022 | Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attacker... |
| CVE-2022-39119 | HIGH | 7.8 | 0.1% | Sep 9, 2022 | In network service, there is a missing permission check. This could lead to local escalation of privilege with no additi... |
| CVE-2022-38700 | HIGH | 8.8 | 0.4% | Sep 9, 2022 | OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission contro... |
| CVE-2022-38144 | HIGH | 8.8 | 0.4% | Sep 9, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress. |
| CVE-2022-38093 | HIGH | 8.8 | 0.3% | Sep 9, 2022 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in All in One SEO plugin <= 4.2.3.1 at WordPress. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now