2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-30319 | HIGH | 8.1 | 0.6% | Jul 28, 2022 | Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a... |
| CVE-2022-30316 | MEDIUM | 6.8 | 0.3% | Jul 28, 2022 | Honeywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity. According to FSCT-2022-00... |
| CVE-2022-30315 | CRITICAL | 9.8 | 0.7% | Jul 28, 2022 | Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient Verification of Data Authenticity... |
| CVE-2022-30314 | MEDIUM | 4.6 | 0.3% | Jul 28, 2022 | Honeywell Experion PKS Safety Manager 5.02 uses Hard-coded Credentials. According to FSCT-2022-0052, there is a Honeywel... |
| CVE-2022-30313 | HIGH | 7.5 | 0.7% | Jul 28, 2022 | Honeywell Experion PKS Safety Manager through 2022-05-06 has Missing Authentication for a Critical Function. According t... |
| CVE-2022-35882 | MEDIUM | 4.8 | 0.4% | Jul 28, 2022 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in GS Plugins GS Testimonial ... |
| CVE-2022-2553 | MEDIUM | 6.5 | 0.9% | Jul 28, 2022 | The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node... |
| CVE-2022-1948 | MEDIUM | 5.4 | 0.8% | Jul 28, 2022 | An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of in... |
| CVE-2022-1805 | HIGH | 8.1 | 0.5% | Jul 28, 2022 | When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero C... |
| CVE-2022-27509 | MEDIUM | 6.1 | 0.4% | Jul 28, 2022 | Unauthenticated redirection to a malicious website |
| CVE-2022-37010 | LOW | 3.3 | 0.2% | Jul 28, 2022 | In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was misse... |
| CVE-2022-37009 | HIGH | 7.8 | 0.3% | Jul 28, 2022 | In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible |
| CVE-2022-36364 | HIGH | 8.8 | 2.2% | Jul 28, 2022 | Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` con... |
| CVE-2022-27611 | HIGH | 8.1 | 0.9% | Jul 28, 2022 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno... |
| CVE-2022-27614 | HIGH | 7.5 | 0.8% | Jul 28, 2022 | Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1... |
| CVE-2022-27613 | HIGH | 8.8 | 0.9% | Jul 28, 2022 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component i... |
| CVE-2022-27612 | CRITICAL | 9.8 | 0.8% | Jul 28, 2022 | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio ... |
| CVE-2022-22685 | HIGH | 8.1 | 1.1% | Jul 28, 2022 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno... |
| CVE-2022-22684 | HIGH | 8.8 | 1.5% | Jul 28, 2022 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task managem... |
| CVE-2022-22683 | CRITICAL | 9.8 | 1.3% | Jul 28, 2022 | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media ... |
| CVE-2022-31627 | CRITICAL | 9.8 | 1.7% | Jul 28, 2022 | In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the ... |
| CVE-2022-27615 | HIGH | 8.1 | 1.0% | Jul 28, 2022 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolog... |
| CVE-2022-2481 | HIGH | 8.8 | 1.0% | Jul 28, 2022 | Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engag... |
| CVE-2022-2480 | HIGH | 8.8 | 17.9% | Jul 28, 2022 | Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially e... |
| CVE-2022-2479 | MEDIUM | 4.3 | 0.7% | Jul 28, 2022 | Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attack... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now