2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-31973 | MEDIUM | 6.5 | 0.9% | Jun 2, 2022 | Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=delete_img. |
| CVE-2022-31966 | MEDIUM | 6.5 | 0.9% | Jun 2, 2022 | ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simple_chat_bot/classes/Master.php?f=delete_img. |
| CVE-2022-31796 | MEDIUM | 6.5 | 0.9% | Jun 2, 2022 | libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequeste... |
| CVE-2022-31783 | MEDIUM | 5.5 | 1.1% | Jun 2, 2022 | Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace. |
| CVE-2022-31342 | MEDIUM | 6.5 | 0.9% | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete_img. |
| CVE-2022-30999 | MEDIUM | 5.4 | 1.1% | Jun 2, 2022 | FriendsofFlarum (FoF) Upload is an extension that handles file uploads intelligently for your forum. If FoF Upload prior... |
| CVE-2022-30804 | MEDIUM | 6.5 | 1.0% | Jun 2, 2022 | elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=. |
| CVE-2022-30514 | MEDIUM | 6.1 | 3.3% | Jun 2, 2022 | School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.p... |
| CVE-2022-30513 | MEDIUM | 6.1 | 3.3% | Jun 2, 2022 | School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.p... |
| CVE-2022-30503 | MEDIUM | 5.5 | 0.3% | Jun 2, 2022 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h. |
| CVE-2022-30482 | MEDIUM | 4.8 | 0.8% | Jun 2, 2022 | Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting (XSS) in \admin\add_cata.p... |
| CVE-2022-30349 | MEDIUM | 6.1 | 0.6% | Jun 2, 2022 | siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-30277 | MEDIUM | 5.7 | 0.2% | Jun 2, 2022 | BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited,... |
| CVE-2022-30115 | MEDIUM | 4.3 | 1.3% | Jun 2, 2022 | Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step ev... |
| CVE-2022-29788 | MEDIUM | 6.5 | 0.8% | Jun 2, 2022 | libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability al... |
| CVE-2022-29780 | MEDIUM | 5.5 | 0.4% | Jun 2, 2022 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_... |
| CVE-2022-29779 | MEDIUM | 5.5 | 0.4% | Jun 2, 2022 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_v... |
| CVE-2022-29734 | MEDIUM | 5.4 | 0.4% | Jun 2, 2022 | A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrar... |
| CVE-2022-29733 | MEDIUM | 5.9 | 0.7% | Jun 2, 2022 | Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive informatio... |
| CVE-2022-29732 | MEDIUM | 6.1 | 0.7% | Jun 2, 2022 | Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vu... |
| CVE-2022-29731 | MEDIUM | 4.3 | 0.4% | Jun 2, 2022 | An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users. |
| CVE-2022-29711 | MEDIUM | 6.1 | 0.7% | Jun 2, 2022 | LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogCo... |
| CVE-2022-29653 | MEDIUM | 6.1 | 0.5% | Jun 2, 2022 | OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/... |
| CVE-2022-29648 | MEDIUM | 5.4 | 0.5% | Jun 2, 2022 | A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTM... |
| CVE-2022-29628 | MEDIUM | 5.4 | 0.5% | Jun 2, 2022 | A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now