2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-29989CRITICAL9.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.
CVE-2022-29988CRITICAL9.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.
CVE-2022-29987CRITICAL9.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.
CVE-2022-29986CRITICAL9.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.
CVE-2022-29985CRITICAL9.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.
CVE-2022-29984CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.
CVE-2022-29983CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.
CVE-2022-29982CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.
CVE-2022-29981CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.
CVE-2022-29980CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.
CVE-2022-29979CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.
CVE-2022-29751CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.
CVE-2022-29750CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.
CVE-2022-29749CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.
CVE-2022-29748CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=.
CVE-2022-29747CRITICAL9.8Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Le...
CVE-2022-29539CRITICAL9.8resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sen...
CVE-2022-29538MEDIUM5.3RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic. An unauthenticated user is able t...
CVE-2022-30525CRITICAL9.8A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat...
CVE-2022-28873MEDIUM4.3A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.op...
CVE-2022-28872HIGH8.8A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing atta...
CVE-2022-1674MEDIUM5.5NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938....
CVE-2022-1650CRITICAL9.3Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior ...
CVE-2022-29930MEDIUM4.9SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0...
CVE-2022-29929MEDIUM6.1In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now