2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2729 | MEDIUM | 5.4 | 0.4% | Aug 9, 2022 | Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1. |
| CVE-2022-2728 | CRITICAL | 9.8 | 0.6% | Aug 9, 2022 | A vulnerability was found in SourceCodester Gym Management System. It has been rated as critical. Affected by this issue... |
| CVE-2022-2727 | CRITICAL | 9.8 | 0.6% | Aug 9, 2022 | A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vu... |
| CVE-2022-36125 | HIGH | 7.5 | 1.4% | Aug 9, 2022 | It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applica... |
| CVE-2022-36124 | HIGH | 7.5 | 1.3% | Aug 9, 2022 | It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the syste... |
| CVE-2022-35724 | HIGH | 7.5 | 1.6% | Aug 9, 2022 | It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue a... |
| CVE-2022-2726 | CRITICAL | 9.8 | 0.5% | Aug 9, 2022 | A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php.... |
| CVE-2022-2725 | MEDIUM | 6.1 | 0.4% | Aug 9, 2022 | A vulnerability was found in SourceCodester Company Website CMS. It has been rated as problematic. Affected by this issu... |
| CVE-2022-2724 | CRITICAL | 9.8 | 0.7% | Aug 9, 2022 | A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by th... |
| CVE-2022-2723 | CRITICAL | 9.8 | 0.7% | Aug 9, 2022 | A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is ... |
| CVE-2022-2722 | CRITICAL | 9.8 | 0.7% | Aug 9, 2022 | A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue aff... |
| CVE-2022-2715 | CRITICAL | 9.8 | 0.7% | Aug 9, 2022 | A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerabili... |
| CVE-2022-25907 | CRITICAL | 9.8 | 1.5% | Aug 9, 2022 | The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge fun... |
| CVE-2022-34293 | HIGH | 7.5 | 1.2% | Aug 8, 2022 | wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routabilit... |
| CVE-2022-36267 | CRITICAL | 9.8 | 53.8% | Aug 8, 2022 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerabilit... |
| CVE-2022-36266 | MEDIUM | 6.1 | 0.7% | Aug 8, 2022 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As the binary file /home/ww... |
| CVE-2022-36265 | HIGH | 7.2 | 1.1% | Aug 8, 2022 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a re... |
| CVE-2022-36264 | CRITICAL | 9.1 | 1.2% | Aug 8, 2022 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnera... |
| CVE-2022-35493 | MEDIUM | 6.1 | 1.4% | Aug 8, 2022 | A Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose... |
| CVE-2022-2713 | CRITICAL | 9.8 | 1.0% | Aug 8, 2022 | Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0. |
| CVE-2022-35490 | CRITICAL | 9.8 | 0.7% | Aug 8, 2022 | Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess ... |
| CVE-2022-35489 | MEDIUM | 6.5 | 0.6% | Aug 8, 2022 | In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system ra... |
| CVE-2022-35488 | HIGH | 7.5 | 0.7% | Aug 8, 2022 | In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby ... |
| CVE-2022-35487 | HIGH | 7.5 | 0.7% | Aug 8, 2022 | Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment... |
| CVE-2022-2460 | CRITICAL | 9.8 | 0.9% | Aug 8, 2022 | The WPDating WordPress plugin before 7.4.0 does not properly escape user input before concatenating it to certain SQL qu... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now