2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39838 | HIGH | 8.6 | 1.5% | Sep 5, 2022 | Systematic FIX Adapter (ALFAFX) 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allo... |
| CVE-2022-30331 | HIGH | 8.8 | 0.9% | Sep 5, 2022 | The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language)... |
| CVE-2022-3121 | HIGH | 8.8 | 0.2% | Sep 5, 2022 | A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problem... |
| CVE-2022-2565 | HIGH | 7.2 | 0.6% | Sep 5, 2022 | The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given... |
| CVE-2022-2083 | HIGH | 7.5 | 0.6% | Sep 5, 2022 | The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers... |
| CVE-2022-38370 | HIGH | 7.5 | 1.1% | Sep 5, 2022 | Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal... |
| CVE-2022-38369 | HIGH | 8.8 | 1.1% | Sep 5, 2022 | Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses t... |
| CVE-2022-3008 | HIGH | 8.8 | 2.8% | Sep 5, 2022 | The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are pr... |
| CVE-2022-39843 | HIGH | 7.8 | 0.4% | Sep 5, 2022 | 123elf Lotus 1-2-3 before 1.0.0rc3 for Linux, and Lotus 1-2-3 R3 for UNIX and other platforms through 9.8.2, allow attac... |
| CVE-2022-39051 | HIGH | 8.8 | 0.7% | Sep 5, 2022 | Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverif... |
| CVE-2022-39832 | HIGH | 7.8 | 0.5% | Sep 5, 2022 | An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/ps... |
| CVE-2022-39831 | HIGH | 7.8 | 0.5% | Sep 5, 2022 | An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in util... |
| CVE-2022-39830 | HIGH | 7.5 | 1.0% | Sep 5, 2022 | sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_public_key_affine_coo... |
| CVE-2022-39829 | HIGH | 7.5 | 1.0% | Sep 5, 2022 | There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the retu... |
| CVE-2022-39828 | HIGH | 7.5 | 1.0% | Sep 5, 2022 | sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_private_key, leading ... |
| CVE-2022-39824 | HIGH | 8.9 | 0.9% | Sep 5, 2022 | Server-side JavaScript injection in Appsmith through 1.7.14 allows remote attackers to execute arbitrary JavaScript code... |
| CVE-2022-3099 | HIGH | 7.8 | 0.5% | Sep 3, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0360. |
| CVE-2022-36754 | HIGH | 7.2 | 0.7% | Sep 2, 2022 | Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/deb... |
| CVE-2022-31176 | HIGH | 8.1 | 0.9% | Sep 2, 2022 | Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headles... |
| CVE-2022-31196 | HIGH | 7.5 | 0.8% | Sep 2, 2022 | Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerabi... |
| CVE-2022-31152 | HIGH | 7.5 | 0.9% | Sep 2, 2022 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix specificatio... |
| CVE-2022-3065 | HIGH | 7.5 | 1.0% | Sep 2, 2022 | Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8. |
| CVE-2022-36071 | HIGH | 8.1 | 0.4% | Sep 2, 2022 | SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support... |
| CVE-2022-34382 | HIGH | 7.8 | 0.2% | Sep 2, 2022 | Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vuln... |
| CVE-2022-34369 | HIGH | 7.5 | 0.5% | Sep 2, 2022 | Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertio... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now