2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-35218 | MEDIUM | 5.5 | 0.2% | Aug 2, 2022 | The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for p... |
| CVE-2022-35217 | HIGH | 7.8 | 0.2% | Aug 2, 2022 | The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for ... |
| CVE-2022-34625 | HIGH | 7.2 | 2.2% | Aug 2, 2022 | Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to exe... |
| CVE-2022-23733 | MEDIUM | 5.4 | 0.5% | Aug 2, 2022 | A stored XSS vulnerability was identified in GitHub Enterprise Server that allowed the injection of arbitrary attributes... |
| CVE-2022-1293 | MEDIUM | 6.1 | 0.4% | Aug 2, 2022 | The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions. |
| CVE-2022-34618 | MEDIUM | 5.4 | 0.7% | Aug 2, 2022 | A stored cross-site scripting (XSS) vulnerability in Mealie 1.0.0beta3 allows attackers to execute arbitrary web scripts... |
| CVE-2022-34613 | CRITICAL | 9.8 | 1.4% | Aug 2, 2022 | Mealie 1.0.0beta3 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a... |
| CVE-2022-29154 | HIGH | 7.4 | 1.7% | Aug 2, 2022 | An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the d... |
| CVE-2022-25867 | HIGH | 7.5 | 1.3% | Aug 2, 2022 | The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet wit... |
| CVE-2022-35422 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php. |
| CVE-2022-35421 | HIGH | 7.2 | 0.8% | Aug 2, 2022 | Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname pa... |
| CVE-2022-34956 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_... |
| CVE-2022-34955 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_... |
| CVE-2022-34954 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoicep... |
| CVE-2022-34953 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at g... |
| CVE-2022-34952 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser... |
| CVE-2022-34951 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at g... |
| CVE-2022-34950 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editprod... |
| CVE-2022-34949 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or passwo... |
| CVE-2022-34948 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbran... |
| CVE-2022-34947 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcate... |
| CVE-2022-34946 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at g... |
| CVE-2022-34945 | CRITICAL | 9.8 | 0.8% | Aug 2, 2022 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at g... |
| CVE-2022-37315 | HIGH | 7.5 | 0.9% | Aug 1, 2022 | graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser. |
| CVE-2022-35922 | HIGH | 7.5 | 1.5% | Aug 1, 2022 | Rust-WebSocket is a WebSocket (RFC6455) library written in Rust. In versions prior to 0.26.5 untrusted websocket connect... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now