2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-27616 | HIGH | 7.2 | 1.6% | Aug 3, 2022 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi compo... |
| CVE-2022-36197 | MEDIUM | 5.4 | 0.5% | Aug 3, 2022 | BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute ar... |
| CVE-2022-34937 | HIGH | 8.8 | 0.6% | Aug 3, 2022 | Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vul... |
| CVE-2022-34928 | HIGH | 8.8 | 0.8% | Aug 3, 2022 | JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user. |
| CVE-2022-34927 | HIGH | 7.8 | 0.4% | Aug 3, 2022 | MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is... |
| CVE-2022-37035 | HIGH | 8.1 | 1.9% | Aug 2, 2022 | An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_p... |
| CVE-2022-33917 | MEDIUM | 5.5 | 0.4% | Aug 2, 2022 | An issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non-privileged user can make ... |
| CVE-2022-36968 | MEDIUM | 4.3 | 0.2% | Aug 2, 2022 | In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to m... |
| CVE-2022-36967 | MEDIUM | 6.1 | 0.6% | Aug 2, 2022 | In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist in... |
| CVE-2022-34619 | MEDIUM | 5.4 | 0.7% | Aug 2, 2022 | A stored cross-site scripting (XSS) vulnerability in Mealie v0.5.5 allows attackers to execute arbitrary web scripts or ... |
| CVE-2022-30285 | CRITICAL | 9.8 | 0.5% | Aug 2, 2022 | In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This ... |
| CVE-2022-29808 | HIGH | 7.5 | 0.6% | Aug 2, 2022 | In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linkin... |
| CVE-2022-29807 | CRITICAL | 9.8 | 1.1% | Aug 2, 2022 | A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow fo... |
| CVE-2022-35925 | CRITICAL | 9.8 | 1.4% | Aug 2, 2022 | BookWyrm is a social network for tracking reading. Versions prior to 0.4.5 were found to lack rate limiting on authentic... |
| CVE-2022-35923 | HIGH | 7.5 | 1.3% | Aug 2, 2022 | v8n is a javascript validation library. Versions of v8n prior to 1.5.1 were found to have an inefficient regular express... |
| CVE-2022-34924 | HIGH | 7.5 | 0.5% | Aug 2, 2022 | Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerab... |
| CVE-2022-35924 | CRITICAL | 9.1 | 1.1% | Aug 2, 2022 | NextAuth.js is a complete open source authentication solution for Next.js applications. `next-auth` users who are using ... |
| CVE-2022-30572 | MEDIUM | 6.5 | 1.0% | Aug 2, 2022 | The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploi... |
| CVE-2022-30571 | MEDIUM | 5.4 | 0.4% | Aug 2, 2022 | The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitab... |
| CVE-2022-2631 | HIGH | 8.8 | 0.9% | Aug 2, 2022 | Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0. |
| CVE-2022-35223 | CRITICAL | 9.8 | 1.3% | Aug 2, 2022 | EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing ... |
| CVE-2022-35222 | MEDIUM | 6.8 | 0.3% | Aug 2, 2022 | HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter lengt... |
| CVE-2022-35221 | MEDIUM | 5.4 | 0.7% | Aug 2, 2022 | Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread s... |
| CVE-2022-35220 | MEDIUM | 6.5 | 0.8% | Aug 2, 2022 | Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A... |
| CVE-2022-35219 | MEDIUM | 5.5 | 0.2% | Aug 2, 2022 | The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now