2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32415 | HIGH | 8.8 | 0.8% | Jul 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/view_product&id=. |
| CVE-2022-32409 | CRITICAL | 9.8 | 9.5% | Jul 14, 2022 | A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3ge... |
| CVE-2022-32406 | MEDIUM | 5.5 | 0.5% | Jul 14, 2022 | GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a D... |
| CVE-2022-32389 | HIGH | 7.5 | 0.5% | Jul 14, 2022 | Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor. This allows attackers to acc... |
| CVE-2022-32323 | HIGH | 7.3 | 0.8% | Jul 14, 2022 | AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660. |
| CVE-2022-32318 | MEDIUM | 5.4 | 0.5% | Jul 14, 2022 | Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the c... |
| CVE-2022-32317 | MEDIUM | 5.5 | 0.8% | Jul 14, 2022 | The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit funct... |
| CVE-2022-32298 | HIGH | 7.5 | 0.9% | Jul 14, 2022 | Toybox v0.8.7 was discovered to contain a NULL pointer dereference via the component httpd.c. This vulnerability can lea... |
| CVE-2022-32297 | HIGH | 7.5 | 1.0% | Jul 14, 2022 | Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function. |
| CVE-2022-31156 | MEDIUM | 4.4 | 0.5% | Jul 14, 2022 | Gradle is a build tool. Dependency verification is a security feature in Gradle Build Tool that was introduced to allow ... |
| CVE-2022-31147 | HIGH | 7.5 | 1.6% | Jul 14, 2022 | The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation pr... |
| CVE-2022-23825 | MEDIUM | 6.5 | 0.8% | Jul 14, 2022 | Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to in... |
| CVE-2022-31142 | HIGH | 7.5 | 1.2% | Jul 14, 2022 | @fastify/bearer-auth is a Fastify plugin to require bearer Authorization headers. @fastify/bearer-auth prior to versions... |
| CVE-2022-2408 | MEDIUM | 4.3 | 0.5% | Jul 14, 2022 | The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allo... |
| CVE-2022-2406 | MEDIUM | 6.5 | 0.8% | Jul 14, 2022 | The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported fi... |
| CVE-2022-2401 | MEDIUM | 6.5 | 0.7% | Jul 14, 2022 | Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access s... |
| CVE-2022-22460 | HIGH | 7.5 | 0.6% | Jul 14, 2022 | IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be use... |
| CVE-2022-22453 | HIGH | 7.5 | 0.3% | Jul 14, 2022 | IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacke... |
| CVE-2022-22452 | HIGH | 7.5 | 0.8% | Jul 14, 2022 | IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker ... |
| CVE-2022-22450 | LOW | 3.8 | 0.5% | Jul 14, 2022 | IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extensio... |
| CVE-2022-35283 | MEDIUM | 6.5 | 1.0% | Jul 14, 2022 | IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a speci... |
| CVE-2022-22477 | MEDIUM | 6.1 | 0.5% | Jul 14, 2022 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e... |
| CVE-2022-22473 | MEDIUM | 5.3 | 0.8% | Jul 14, 2022 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information ca... |
| CVE-2022-32225 | MEDIUM | 6.1 | 0.5% | Jul 14, 2022 | A reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam Management Pack for Microsoft... |
| CVE-2022-32223 | HIGH | 7.3 | 1.6% | Jul 14, 2022 | Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnera... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now