2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-20134HIGH7.8In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due...
CVE-2022-20133HIGH7.8In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permis...
CVE-2022-20131HIGH7.5In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This...
CVE-2022-20126HIGH7.3In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interacti...
CVE-2022-20124HIGH7.8In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications...
CVE-2022-20123HIGH7.5In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check...
CVE-2022-32230HIGH7.5Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch se...
CVE-2022-32363HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/view_category.php?id=.
CVE-2022-32362HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_category.php?id=.
CVE-2022-32359HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_category.
CVE-2022-32358HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_inquiry.
CVE-2022-32355HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/view_product&id=.
CVE-2022-32354HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user&id=.
CVE-2022-32353HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_field_order.php?id=.
CVE-2022-31050HIGH7.2TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool s...
CVE-2022-29241HIGH8.8Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like...
CVE-2022-31595HIGH8.8SAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticated user, r...
CVE-2022-31590HIGH7.8SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to...
CVE-2022-32367HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/view_inquiry&id=.
CVE-2022-32366HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/view_field.php?id=.
CVE-2022-32365HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=.
CVE-2022-32364HIGH7.2Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manage_product&id=.
CVE-2022-32557HIGH7.5An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS ...
CVE-2022-32351HIGH7.2Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_...
CVE-2022-32350HIGH7.2Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now