2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-30736 | MEDIUM | 5.3 | 0.4% | Jun 7, 2022 | Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of co... |
| CVE-2022-30734 | MEDIUM | 5.3 | 0.5% | Jun 7, 2022 | Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an ... |
| CVE-2022-30733 | MEDIUM | 5.3 | 0.5% | Jun 7, 2022 | Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an u... |
| CVE-2022-30731 | MEDIUM | 5.5 | 0.2% | Jun 7, 2022 | Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary priv... |
| CVE-2022-30730 | MEDIUM | 4.6 | 0.2% | Jun 7, 2022 | Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authen... |
| CVE-2022-30727 | MEDIUM | 5.5 | 0.1% | Jun 7, 2022 | Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService pri... |
| CVE-2022-30729 | MEDIUM | 4.6 | 0.1% | Jun 7, 2022 | Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID a... |
| CVE-2022-30725 | MEDIUM | 4.3 | 0.1% | Jun 7, 2022 | Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionErr... |
| CVE-2022-30724 | MEDIUM | 4.3 | 0.1% | Jun 7, 2022 | Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCom... |
| CVE-2022-30723 | MEDIUM | 4.3 | 0.1% | Jun 7, 2022 | Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecogni... |
| CVE-2022-30721 | MEDIUM | 5.3 | 0.2% | Jun 7, 2022 | Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers... |
| CVE-2022-30720 | MEDIUM | 5.3 | 0.2% | Jun 7, 2022 | Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers... |
| CVE-2022-30719 | MEDIUM | 5.3 | 0.2% | Jun 7, 2022 | Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers... |
| CVE-2022-30716 | MEDIUM | 5.3 | 0.2% | Jun 7, 2022 | Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release 1 allows untrusted appl... |
| CVE-2022-30715 | MEDIUM | 5.3 | 0.2% | Jun 7, 2022 | Improper access control vulnerability in DofViewer prior to SMR Jun-2022 Release 1 allows attackers to control floating ... |
| CVE-2022-30709 | MEDIUM | 5.3 | 0.2% | Jun 7, 2022 | Improper input validation check logic vulnerability in SECRIL prior to SMR Jun-2022 Release 1 allows attackers to trigge... |
| CVE-2022-31495 | MEDIUM | 6.1 | 0.9% | Jun 7, 2022 | LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS. |
| CVE-2022-31025 | MEDIUM | 5.3 | 0.9% | Jun 7, 2022 | Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the `stable` branch and 2.9.0be... |
| CVE-2022-1991 | MEDIUM | 4.8 | 0.6% | Jun 7, 2022 | A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.p... |
| CVE-2022-31494 | MEDIUM | 6.1 | 1.0% | Jun 6, 2022 | LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS. |
| CVE-2022-29296 | MEDIUM | 6.1 | 2.4% | Jun 6, 2022 | A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attack... |
| CVE-2022-28479 | MEDIUM | 4.8 | 0.6% | Jun 6, 2022 | SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. An attacker with admin privileges can inject ... |
| CVE-2022-28478 | MEDIUM | 6.5 | 1.4% | Jun 6, 2022 | SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality inside the "Log files m... |
| CVE-2022-28051 | MEDIUM | 5.4 | 0.9% | Jun 6, 2022 | The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to s... |
| CVE-2022-31498 | MEDIUM | 6.1 | 0.9% | Jun 6, 2022 | LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now