2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1364 | HIGH | 8.8 | 13.7% | Jul 26, 2022 | Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit ... |
| CVE-2022-1671 | HIGH | 7.1 | 0.3% | Jul 26, 2022 | A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw a... |
| CVE-2022-1651 | HIGH | 7.1 | 0.2% | Jul 26, 2022 | A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the AC... |
| CVE-2022-35639 | HIGH | 7.5 | 0.8% | Jul 26, 2022 | IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could cau... |
| CVE-2022-35286 | HIGH | 8.8 | 0.3% | Jul 26, 2022 | IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker t... |
| CVE-2022-22412 | MEDIUM | 4.6 | 0.3% | Jul 26, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client machi... |
| CVE-2022-1648 | HIGH | 7.2 | 1.0% | Jul 26, 2022 | Pandora FMS v7.0NG.760 and below allows a relative path traversal in File Manager where a privileged user could upload a... |
| CVE-2022-36412 | CRITICAL | 9.8 | 5.7% | Jul 26, 2022 | In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API r... |
| CVE-2022-36161 | CRITICAL | 9.8 | 1.0% | Jul 26, 2022 | Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter. |
| CVE-2022-34991 | MEDIUM | 5.4 | 0.4% | Jul 26, 2022 | Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name... |
| CVE-2022-34989 | CRITICAL | 9.8 | 0.9% | Jul 26, 2022 | Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_passwo... |
| CVE-2022-34988 | MEDIUM | 5.4 | 0.5% | Jul 26, 2022 | Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the compon... |
| CVE-2022-34067 | HIGH | 7.5 | 0.8% | Jul 26, 2022 | Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter. |
| CVE-2022-33745 | HIGH | 8.8 | 0.3% | Jul 26, 2022 | insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF ... |
| CVE-2022-31879 | HIGH | 8.8 | 1.1% | Jul 26, 2022 | Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter. |
| CVE-2022-2225 | HIGH | 7.8 | 0.2% | Jul 26, 2022 | By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to b... |
| CVE-2022-33977 | HIGH | 7.5 | 1.4% | Jul 26, 2022 | untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restr... |
| CVE-2022-31471 | HIGH | 7.5 | 1.3% | Jul 26, 2022 | untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restr... |
| CVE-2022-30706 | MEDIUM | 6.1 | 0.5% | Jul 26, 2022 | Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user ... |
| CVE-2022-1042 | HIGH | 8.8 | 0.8% | Jul 26, 2022 | In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. |
| CVE-2022-1041 | HIGH | 8.8 | 0.8% | Jul 26, 2022 | In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. |
| CVE-2022-22686 | HIGH | 8 | 0.3% | Jul 26, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote... |
| CVE-2022-34749 | HIGH | 7.5 | 1.2% | Jul 25, 2022 | In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high a... |
| CVE-2022-34577 | CRITICAL | 9.8 | 1.7% | Jul 25, 2022 | A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a craf... |
| CVE-2022-34576 | HIGH | 7.5 | 2.9% | Jul 25, 2022 | A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arb... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now