2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29676 | HIGH | 7.2 | 0.9% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph... |
| CVE-2022-29670 | HIGH | 7.2 | 0.9% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph... |
| CVE-2022-29669 | HIGH | 8.8 | 0.9% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph... |
| CVE-2022-29667 | HIGH | 8.8 | 0.9% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. ... |
| CVE-2022-29666 | HIGH | 7.2 | 0.9% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph... |
| CVE-2022-29665 | HIGH | 7.2 | 0.8% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph... |
| CVE-2022-29664 | HIGH | 8.8 | 0.9% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph... |
| CVE-2022-29663 | HIGH | 7.2 | 0.9% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph... |
| CVE-2022-29662 | HIGH | 7.2 | 0.8% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph... |
| CVE-2022-29661 | HIGH | 7.2 | 0.9% | May 26, 2022 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /ad... |
| CVE-2022-29721 | HIGH | 7.5 | 1.0% | May 26, 2022 | 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resu... |
| CVE-2022-29720 | HIGH | 7.5 | 0.9% | May 26, 2022 | 74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Downlo... |
| CVE-2022-27169 | HIGH | 7.5 | 1.6% | May 25, 2022 | An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Softw... |
| CVE-2022-26303 | HIGH | 7.5 | 1.2% | May 25, 2022 | An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Softwar... |
| CVE-2022-26077 | HIGH | 7.5 | 1.1% | May 25, 2022 | A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications fu... |
| CVE-2022-26067 | HIGH | 7.5 | 1.2% | May 25, 2022 | An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation So... |
| CVE-2022-26043 | HIGH | 7.5 | 1.2% | May 25, 2022 | An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Sof... |
| CVE-2022-26026 | HIGH | 7.5 | 1.1% | May 25, 2022 | A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software ... |
| CVE-2022-29248 | HIGH | 8.1 | 1.2% | May 25, 2022 | Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middlewar... |
| CVE-2022-30428 | HIGH | 7.5 | 1.1% | May 25, 2022 | In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading. |
| CVE-2022-30427 | HIGH | 7.5 | 1.4% | May 25, 2022 | In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal. |
| CVE-2022-27305 | HIGH | 8.8 | 1.0% | May 25, 2022 | Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to se... |
| CVE-2022-1678 | HIGH | 7.5 | 2.9% | May 25, 2022 | An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can le... |
| CVE-2022-22127 | HIGH | 7.2 | 1.0% | May 25, 2022 | Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers u... |
| CVE-2022-29651 | HIGH | 7.2 | 1.4% | May 25, 2022 | An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now