2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4231 | MEDIUM | 5.4 | 0.4% | Nov 30, 2022 | A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue... |
| CVE-2022-4229 | CRITICAL | 9.8 | 0.9% | Nov 30, 2022 | A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0. This vulnerability ... |
| CVE-2022-4228 | HIGH | 7.5 | 1.2% | Nov 30, 2022 | A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affect... |
| CVE-2022-3859 | MEDIUM | 6.7 | 0.2% | Nov 30, 2022 | An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This all... |
| CVE-2022-4222 | CRITICAL | 9.8 | 0.7% | Nov 30, 2022 | A vulnerability was found in SourceCodester Canteen Management System. It has been rated as critical. This issue affects... |
| CVE-2022-46338 | MEDIUM | 6.5 | 0.7% | Nov 30, 2022 | g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nod... |
| CVE-2022-45869 | MEDIUM | 5.5 | 0.3% | Nov 30, 2022 | A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of... |
| CVE-2022-44097 | CRITICAL | 9.8 | 0.8% | Nov 30, 2022 | Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate pri... |
| CVE-2022-44096 | CRITICAL | 9.8 | 0.8% | Nov 30, 2022 | Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate p... |
| CVE-2022-41413 | MEDIUM | 4.3 | 2.0% | Nov 30, 2022 | perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attack... |
| CVE-2022-41412 | HIGH | 8.6 | 4.1% | Nov 30, 2022 | An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and exec... |
| CVE-2022-45337 | HIGH | 7.5 | 0.8% | Nov 30, 2022 | Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind. |
| CVE-2022-45332 | HIGH | 7.8 | 0.3% | Nov 30, 2022 | LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at dec... |
| CVE-2022-45328 | HIGH | 7.2 | 0.7% | Nov 30, 2022 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edi... |
| CVE-2022-40265 | HIGH | 7.5 | 0.9% | Nov 30, 2022 | Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version ... |
| CVE-2022-4195 | MEDIUM | 4.3 | 0.5% | Nov 30, 2022 | Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to by... |
| CVE-2022-4194 | HIGH | 8.8 | 0.6% | Nov 30, 2022 | Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit... |
| CVE-2022-4193 | HIGH | 8.8 | 0.7% | Nov 30, 2022 | Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to ... |
| CVE-2022-4192 | HIGH | 8.8 | 0.8% | Nov 30, 2022 | Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to... |
| CVE-2022-4191 | HIGH | 8.8 | 0.6% | Nov 30, 2022 | Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to enga... |
| CVE-2022-4190 | HIGH | 8.8 | 0.7% | Nov 30, 2022 | Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fi... |
| CVE-2022-4189 | MEDIUM | 4.3 | 0.4% | Nov 30, 2022 | Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a ... |
| CVE-2022-4188 | MEDIUM | 4.3 | 0.6% | Nov 30, 2022 | Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote a... |
| CVE-2022-4187 | MEDIUM | 6.5 | 0.6% | Nov 30, 2022 | Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker... |
| CVE-2022-4186 | MEDIUM | 4.3 | 0.4% | Nov 30, 2022 | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now