2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-33057 | HIGH | 7.2 | 0.8% | Jun 29, 2022 | Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-2073 | HIGH | 7.2 | 9.0% | Jun 29, 2022 | Code Injection in GitHub repository getgrav/grav prior to 1.7.34. |
| CVE-2022-31110 | HIGH | 7.5 | 1.2% | Jun 29, 2022 | RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to... |
| CVE-2022-31063 | MEDIUM | 5.4 | 0.5% | Jun 29, 2022 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior... |
| CVE-2022-31058 | HIGH | 7.2 | 1.1% | Jun 29, 2022 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior... |
| CVE-2022-31032 | MEDIUM | 4.3 | 0.7% | Jun 29, 2022 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior... |
| CVE-2022-33639 | HIGH | 8.3 | 2.0% | Jun 29, 2022 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2022-33638 | HIGH | 8.3 | 1.9% | Jun 29, 2022 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2022-33042 | HIGH | 7.2 | 0.8% | Jun 29, 2022 | Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /... |
| CVE-2022-30192 | HIGH | 8.3 | 2.1% | Jun 29, 2022 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2022-2252 | MEDIUM | 6.1 | 0.8% | Jun 29, 2022 | Open Redirect in GitHub repository microweber/microweber prior to 1.2.19. |
| CVE-2022-32969 | MEDIUM | 5.9 | 1.2% | Jun 29, 2022 | MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used... |
| CVE-2022-34043 | HIGH | 7.3 | 0.3% | Jun 29, 2022 | Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perf... |
| CVE-2022-33037 | HIGH | 7.8 | 0.4% | Jun 29, 2022 | A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file. |
| CVE-2022-33036 | HIGH | 7.8 | 0.4% | Jun 29, 2022 | A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file. |
| CVE-2022-33035 | HIGH | 7.8 | 0.4% | Jun 29, 2022 | XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes wi... |
| CVE-2022-33107 | CRITICAL | 9.8 | 21.9% | Jun 29, 2022 | ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cac... |
| CVE-2022-33023 | HIGH | 7.5 | 0.6% | Jun 29, 2022 | CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wr... |
| CVE-2022-33021 | HIGH | 7.5 | 0.9% | Jun 29, 2022 | CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30. |
| CVE-2022-31897 | MEDIUM | 6.1 | 0.9% | Jun 29, 2022 | SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?ms... |
| CVE-2022-31266 | MEDIUM | 4.3 | 0.7% | Jun 29, 2022 | In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers... |
| CVE-2022-29272 | MEDIUM | 6.1 | 3.3% | Jun 29, 2022 | In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing. |
| CVE-2022-29271 | MEDIUM | 6.5 | 1.5% | Jun 29, 2022 | In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime ... |
| CVE-2022-29270 | MEDIUM | 4.3 | 1.9% | Jun 29, 2022 | In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address. |
| CVE-2022-29269 | MEDIUM | 6.5 | 2.4% | Jun 29, 2022 | In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now