2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2578 | CRITICAL | 9.8 | 0.6% | Jul 29, 2022 | A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This i... |
| CVE-2022-2577 | HIGH | 8.8 | 0.6% | Jul 29, 2022 | A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affe... |
| CVE-2022-27873 | HIGH | 7.8 | 0.2% | Jul 29, 2022 | An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a malicious SVG file being p... |
| CVE-2022-36123 | HIGH | 7.8 | 0.9% | Jul 29, 2022 | The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV... |
| CVE-2022-35643 | CRITICAL | 9.1 | 1.1% | Jul 29, 2022 | IBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a denial of service. IBM... |
| CVE-2022-2576 | HIGH | 7.5 | 0.5% | Jul 29, 2022 | In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full hand... |
| CVE-2022-1277 | CRITICAL | 9.4 | 0.7% | Jul 29, 2022 | Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability. |
| CVE-2022-24912 | HIGH | 7.5 | 0.9% | Jul 29, 2022 | The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in t... |
| CVE-2022-1799 | CRITICAL | 9.8 | 0.3% | Jul 29, 2022 | Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play ... |
| CVE-2022-36752 | MEDIUM | 5.5 | 0.4% | Jul 28, 2022 | png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable... |
| CVE-2022-36234 | HIGH | 7.5 | 0.8% | Jul 28, 2022 | SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnera... |
| CVE-2022-34558 | CRITICAL | 9.8 | 1.0% | Jul 28, 2022 | WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows at... |
| CVE-2022-34557 | HIGH | 8.8 | 0.8% | Jul 28, 2022 | Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /... |
| CVE-2022-34556 | MEDIUM | 5.5 | 0.3% | Jul 28, 2022 | PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. |
| CVE-2022-34555 | CRITICAL | 9.8 | 20.5% | Jul 28, 2022 | TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is ... |
| CVE-2022-34580 | MEDIUM | 4.8 | 0.4% | Jul 28, 2022 | Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the addr... |
| CVE-2022-34568 | HIGH | 7.5 | 0.9% | Jul 28, 2022 | SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c. |
| CVE-2022-30287 | HIGH | 8 | 70.3% | Jul 28, 2022 | Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instan... |
| CVE-2022-2399 | HIGH | 8.8 | 0.6% | Jul 28, 2022 | Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap c... |
| CVE-2022-29558 | HIGH | 8.8 | 1.2% | Jul 28, 2022 | Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface. |
| CVE-2022-29360 | MEDIUM | 5.4 | 1.0% | Jul 28, 2022 | The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message. |
| CVE-2022-34593 | HIGH | 7.5 | 0.6% | Jul 28, 2022 | DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability. |
| CVE-2022-34578 | HIGH | 7.2 | 1.0% | Jul 28, 2022 | Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Brandin... |
| CVE-2022-2564 | CRITICAL | 9.8 | 32.7% | Jul 28, 2022 | Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6. |
| CVE-2022-30320 | MEDIUM | 4.3 | 0.2% | Jul 28, 2022 | Saia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic Algorithm. According to FSCT-202... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now