2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43719 | HIGH | 8.8 | 0.6% | Jan 16, 2023 | Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue a... |
| CVE-2022-4258 | HIGH | 7.8 | 0.2% | Jan 16, 2023 | In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to ... |
| CVE-2022-45353 | HIGH | 8.1 | 0.5% | Jan 14, 2023 | Broken Access Control in Betheme theme <= 26.6.1 on WordPress. |
| CVE-2022-41955 | HIGH | 8.8 | 1.5% | Jan 14, 2023 | Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that en... |
| CVE-2022-41721 | HIGH | 7.5 | 1.8% | Jan 13, 2023 | A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP reque... |
| CVE-2022-46093 | HIGH | 8.2 | 0.7% | Jan 13, 2023 | Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the ... |
| CVE-2022-42136 | HIGH | 8.8 | 0.9% | Jan 13, 2023 | Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where... |
| CVE-2022-46956 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46953 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46952 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46951 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46950 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at ... |
| CVE-2022-46949 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes... |
| CVE-2022-46947 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes... |
| CVE-2022-46946 | HIGH | 7.2 | 0.8% | Jan 13, 2023 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes... |
| CVE-2022-3693 | HIGH | 7.5 | 0.7% | Jan 13, 2023 | Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue a... |
| CVE-2022-42268 | HIGH | 7.8 | 0.6% | Jan 13, 2023 | Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Mac... |
| CVE-2022-3841 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the... |
| CVE-2022-3143 | HIGH | 7.4 | 0.6% | Jan 13, 2023 | wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elyt... |
| CVE-2022-42290 | HIGH | 8.8 | 1.0% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, w... |
| CVE-2022-42289 | HIGH | 8.8 | 1.0% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, w... |
| CVE-2022-42287 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary file... |
| CVE-2022-42286 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of pr... |
| CVE-2022-42285 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SP... |
| CVE-2022-42283 | HIGH | 7.8 | 0.2% | Jan 13, 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now