2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-28367 | MEDIUM | 6.1 | 1.0% | Apr 21, 2022 | OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer... |
| CVE-2022-28366 | HIGH | 7.5 | 2.0% | Apr 21, 2022 | Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes ex... |
| CVE-2022-29280 | — | — | — | Apr 21, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-28366. Reason: This candidate is a reservation d... |
| CVE-2022-26856 | HIGH | 7.8 | 0.2% | Apr 21, 2022 | Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could p... |
| CVE-2022-24424 | HIGH | 7.5 | 1.6% | Apr 21, 2022 | Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthentic... |
| CVE-2022-24423 | HIGH | 7.5 | 1.5% | Apr 21, 2022 | Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker co... |
| CVE-2022-22558 | MEDIUM | 6 | 0.2% | Apr 21, 2022 | Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication ... |
| CVE-2022-28445 | MEDIUM | 6.5 | 1.0% | Apr 21, 2022 | KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module. |
| CVE-2022-28444 | HIGH | 7.5 | 1.5% | Apr 21, 2022 | UCMS v1.6 was discovered to contain an arbitrary file read vulnerability. |
| CVE-2022-28443 | CRITICAL | 9.1 | 0.9% | Apr 21, 2022 | UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability. |
| CVE-2022-28440 | HIGH | 8.8 | 1.6% | Apr 21, 2022 | An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file. |
| CVE-2022-28439 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid... |
| CVE-2022-28438 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=... |
| CVE-2022-28437 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=... |
| CVE-2022-28436 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=... |
| CVE-2022-28435 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displayg... |
| CVE-2022-28434 | CRITICAL | 9.8 | 0.9% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&... |
| CVE-2022-28433 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=... |
| CVE-2022-28432 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=displ... |
| CVE-2022-28431 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&s... |
| CVE-2022-28429 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=. |
| CVE-2022-28427 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=. |
| CVE-2022-28426 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid... |
| CVE-2022-28425 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&val... |
| CVE-2022-28424 | CRITICAL | 9.8 | 1.2% | Apr 21, 2022 | Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now