2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1571 | MEDIUM | 6.1 | 0.8% | May 4, 2022 | Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07. Th... |
| CVE-2022-1555 | MEDIUM | 6.1 | 1.2% | May 4, 2022 | DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, d... |
| CVE-2022-1502 | MEDIUM | 4.3 | 0.5% | May 4, 2022 | Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be ... |
| CVE-2022-28055 | CRITICAL | 9.8 | 1.5% | May 4, 2022 | Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function. |
| CVE-2022-27470 | HIGH | 7.8 | 0.9% | May 4, 2022 | SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). T... |
| CVE-2022-27431 | CRITICAL | 9.8 | 1.0% | May 4, 2022 | Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the groupid parameter at /coreframe/app/memb... |
| CVE-2022-27420 | CRITICAL | 9.8 | 1.4% | May 4, 2022 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact paramete... |
| CVE-2022-24901 | HIGH | 7.5 | 0.6% | May 4, 2022 | Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to byp... |
| CVE-2022-27413 | CRITICAL | 9.8 | 2.9% | May 3, 2022 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in a... |
| CVE-2022-21743 | HIGH | 7.8 | 0.1% | May 3, 2022 | In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege ... |
| CVE-2022-20111 | HIGH | 8.4 | 0.1% | May 3, 2022 | In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privi... |
| CVE-2022-20108 | MEDIUM | 6.7 | 0.1% | May 3, 2022 | In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local... |
| CVE-2022-20107 | MEDIUM | 4.4 | 0.1% | May 3, 2022 | In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial o... |
| CVE-2022-20106 | MEDIUM | 6.7 | 0.1% | May 3, 2022 | In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local esc... |
| CVE-2022-20105 | MEDIUM | 6.7 | 0.1% | May 3, 2022 | In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local es... |
| CVE-2022-20104 | MEDIUM | 5.5 | 0.1% | May 3, 2022 | In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local infor... |
| CVE-2022-20103 | MEDIUM | 4.4 | 0.1% | May 3, 2022 | In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local infor... |
| CVE-2022-20102 | MEDIUM | 4.4 | 0.1% | May 3, 2022 | In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local in... |
| CVE-2022-20101 | MEDIUM | 5.5 | 0.1% | May 3, 2022 | In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information ... |
| CVE-2022-1548 | HIGH | 8.8 | 0.5% | May 3, 2022 | Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook me... |
| CVE-2022-28793 | MEDIUM | 4.4 | 0.2% | May 3, 2022 | Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to... |
| CVE-2022-28792 | HIGH | 7.8 | 0.2% | May 3, 2022 | DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary... |
| CVE-2022-28791 | MEDIUM | 5.5 | 0.2% | May 3, 2022 | Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to ove... |
| CVE-2022-28790 | LOW | 3.3 | 0.2% | May 3, 2022 | Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device. The pat... |
| CVE-2022-28789 | MEDIUM | 5.5 | 0.2% | May 3, 2022 | Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interacti... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now