2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21941 | CRITICAL | 9.8 | 2.0% | Aug 31, 2022 | All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauth... |
| CVE-2022-36045 | CRITICAL | 9.8 | 1.0% | Aug 31, 2022 | NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes we... |
| CVE-2022-37021 | CRITICAL | 9.8 | 2.3% | Aug 31, 2022 | Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when us... |
| CVE-2022-36749 | CRITICAL | 9.8 | 2.5% | Aug 30, 2022 | RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/File... |
| CVE-2022-36735 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admi... |
| CVE-2022-36734 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admi... |
| CVE-2022-36733 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/... |
| CVE-2022-36732 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /libraria... |
| CVE-2022-36731 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /libr... |
| CVE-2022-36730 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /libr... |
| CVE-2022-31232 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker... |
| CVE-2022-37176 | CRITICAL | 9.8 | 1.0% | Aug 30, 2022 | Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi... |
| CVE-2022-37149 | CRITICAL | 9.8 | 2.8% | Aug 30, 2022 | WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the f... |
| CVE-2022-38116 | CRITICAL | 9.8 | 0.9% | Aug 30, 2022 | Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source cod... |
| CVE-2022-36714 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /sta... |
| CVE-2022-36713 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /lib... |
| CVE-2022-36712 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/st... |
| CVE-2022-36711 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bo... |
| CVE-2022-36709 | CRITICAL | 9.8 | 0.8% | Aug 30, 2022 | Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/ed... |
| CVE-2022-36560 | CRITICAL | 9.8 | 0.7% | Aug 29, 2022 | Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers ... |
| CVE-2022-36559 | CRITICAL | 9.8 | 1.7% | Aug 29, 2022 | Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping par... |
| CVE-2022-36558 | CRITICAL | 9.8 | 0.7% | Aug 29, 2022 | Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able ... |
| CVE-2022-36557 | CRITICAL | 9.8 | 0.8% | Aug 29, 2022 | Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the r... |
| CVE-2022-36556 | CRITICAL | 9.8 | 1.5% | Aug 29, 2022 | Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddr... |
| CVE-2022-36555 | CRITICAL | 9.8 | 0.6% | Aug 29, 2022 | Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked v... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now