2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4543 | MEDIUM | 5.5 | 1.0% | Jan 11, 2023 | A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local atta... |
| CVE-2022-4415 | MEDIUM | 5.5 | 0.9% | Jan 11, 2023 | A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not ... |
| CVE-2022-47864 | CRITICAL | 9.8 | 0.9% | Jan 11, 2023 | Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php. |
| CVE-2022-47862 | CRITICAL | 9.8 | 0.9% | Jan 11, 2023 | Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php. |
| CVE-2022-47861 | CRITICAL | 9.8 | 0.9% | Jan 11, 2023 | Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php. |
| CVE-2022-47860 | CRITICAL | 9.8 | 0.9% | Jan 11, 2023 | Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php. |
| CVE-2022-47859 | CRITICAL | 9.8 | 0.9% | Jan 11, 2023 | Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php. |
| CVE-2022-47866 | CRITICAL | 9.8 | 0.9% | Jan 11, 2023 | Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php. |
| CVE-2022-47865 | CRITICAL | 9.8 | 0.9% | Jan 11, 2023 | Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php. |
| CVE-2022-4696 | HIGH | 7.8 | 0.4% | Jan 11, 2023 | There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If ... |
| CVE-2022-42967 | CRITICAL | 9.6 | 0.8% | Jan 11, 2023 | Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This dire... |
| CVE-2022-34441 | CRITICAL | 9.8 | 0.5% | Jan 11, 2023 | Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerabil... |
| CVE-2022-34440 | CRITICAL | 9.8 | 0.5% | Jan 11, 2023 | Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerabili... |
| CVE-2022-23814 | MEDIUM | 5.3 | 0.5% | Jan 11, 2023 | Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest... |
| CVE-2022-23813 | MEDIUM | 5.3 | 0.5% | Jan 11, 2023 | The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of i... |
| CVE-2022-42271 | HIGH | 7.8 | 0.3% | Jan 11, 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause ... |
| CVE-2022-0553 | MEDIUM | 4.6 | 0.3% | Jan 11, 2023 | There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means... |
| CVE-2022-48253 | CRITICAL | 9.8 | 3.4% | Jan 11, 2023 | nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands... |
| CVE-2022-48252 | CRITICAL | 9.8 | 2.7% | Jan 11, 2023 | The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter)... |
| CVE-2022-43393 | HIGH | 8.2 | 0.6% | Jan 11, 2023 | An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 fir... |
| CVE-2022-43392 | MEDIUM | 6.5 | 0.6% | Jan 11, 2023 | A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which ... |
| CVE-2022-43391 | MEDIUM | 6.5 | 0.7% | Jan 11, 2023 | A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, w... |
| CVE-2022-43390 | HIGH | 8.8 | 1.1% | Jan 11, 2023 | A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allo... |
| CVE-2022-43389 | CRITICAL | 9.8 | 0.6% | Jan 11, 2023 | A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, whic... |
| CVE-2022-4382 | MEDIUM | 6.4 | 0.5% | Jan 10, 2023 | A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now