2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2833 | HIGH | 7.5 | 1.0% | Aug 16, 2022 | Endless Infinite loop in Blender-thumnailing due to logical bugs. |
| CVE-2022-2832 | HIGH | 7.5 | 1.5% | Aug 16, 2022 | A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may... |
| CVE-2022-2831 | HIGH | 7.5 | 1.3% | Aug 16, 2022 | A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead ... |
| CVE-2022-2662 | CRITICAL | 9.8 | 0.8% | Aug 16, 2022 | Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process... |
| CVE-2022-2661 | HIGH | 8.8 | 0.7% | Aug 16, 2022 | Sequi PortBloque S has an improper authorization vulnerability, which may allow a low-privileged user to perform adminis... |
| CVE-2022-37393 | HIGH | 7.8 | 1.7% | Aug 16, 2022 | Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As ... |
| CVE-2022-2847 | CRITICAL | 9.8 | 0.7% | Aug 16, 2022 | A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue ... |
| CVE-2022-2846 | MEDIUM | 4.3 | 2.2% | Aug 16, 2022 | The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place wh... |
| CVE-2022-2844 | MEDIUM | 6.1 | 0.4% | Aug 16, 2022 | A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This af... |
| CVE-2022-2843 | MEDIUM | 6.1 | 0.5% | Aug 16, 2022 | A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this ... |
| CVE-2022-38189 | MEDIUM | 5.4 | 0.5% | Aug 16, 2022 | A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS may allow a remote, authenticated attacker t... |
| CVE-2022-38184 | HIGH | 7.5 | 0.9% | Aug 16, 2022 | There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 and below which could allow a rem... |
| CVE-2022-36242 | CRITICAL | 9.8 | 0.8% | Aug 16, 2022 | Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=. |
| CVE-2022-30576 | MEDIUM | 5.4 | 0.4% | Aug 16, 2022 | The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - ... |
| CVE-2022-30575 | MEDIUM | 5.4 | 0.5% | Aug 16, 2022 | The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - ... |
| CVE-2022-38194 | MEDIUM | 5.5 | 0.1% | Aug 16, 2022 | In Esri Portal for ArcGIS versions 10.8.1, a system property is not properly encrypted. This may lead to a local user re... |
| CVE-2022-38193 | CRITICAL | 9.6 | 0.7% | Aug 16, 2022 | There is a code injection vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below that may allow a remote, una... |
| CVE-2022-38192 | MEDIUM | 5.4 | 0.5% | Aug 16, 2022 | A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS may allow a remote, authenticated attacker t... |
| CVE-2022-38362 | HIGH | 8.8 | 1.6% | Aug 16, 2022 | Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remot... |
| CVE-2022-36599 | CRITICAL | 9.8 | 0.9% | Aug 16, 2022 | Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists. |
| CVE-2022-36530 | MEDIUM | 6.1 | 0.7% | Aug 16, 2022 | An issue was discovered in rageframe2 2.6.37. There is a XSS vulnerability in the user agent related parameters of the i... |
| CVE-2022-36273 | CRITICAL | 9.8 | 2.4% | Aug 16, 2022 | Tenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg. |
| CVE-2022-36272 | CRITICAL | 9.8 | 0.9% | Aug 16, 2022 | Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName param... |
| CVE-2022-30264 | CRITICAL | 9.8 | 0.4% | Aug 16, 2022 | The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize th... |
| CVE-2022-29959 | MEDIUM | 5.5 | 0.3% | Aug 16, 2022 | Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now