2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-51020 | MEDIUM | 5.9 | 0.1% | Oct 12, 2026 | Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the... |
| CVE-2022-51019 | HIGH | 8.8 | — | Sep 29, 2026 | Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where ... |
| CVE-2022-4997 | HIGH | 8.6 | 0.2% | Sep 23, 2026 | The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before us... |
| CVE-2022-42917 | MEDIUM | 6.7 | 0.1% | Sep 14, 2026 | In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the config... |
| CVE-2022-26962 | MEDIUM | 5.4 | 0.2% | Sep 10, 2026 | Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=... |
| CVE-2022-51018 | MEDIUM | 6.5 | 0.4% | Sep 7, 2026 | PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title len... |
| CVE-2022-51017 | HIGH | 7.5 | 0.5% | Sep 7, 2026 | PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, all... |
| CVE-2022-51016 | MEDIUM | 6.1 | 0.2% | Sep 7, 2026 | PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the server cannot verify ... |
| CVE-2022-51015 | MEDIUM | 6.5 | 0.7% | Sep 7, 2026 | PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK action... |
| CVE-2022-51014 | MEDIUM | 6.5 | 0.5% | Sep 7, 2026 | PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when pro... |
| CVE-2022-51013 | MEDIUM | 6.5 | 0.5% | Sep 7, 2026 | PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received fro... |
| CVE-2022-51012 | MEDIUM | 6.5 | 0.5% | Sep 7, 2026 | PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transac... |
| CVE-2022-51011 | MEDIUM | 4.3 | 0.4% | Sep 7, 2026 | PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by n... |
| CVE-2022-51010 | MEDIUM | 6.5 | 0.5% | Sep 7, 2026 | PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Atta... |
| CVE-2022-51009 | HIGH | 7.5 | 0.3% | Sep 6, 2026 | PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin ... |
| CVE-2022-51008 | MEDIUM | 5.3 | 0.3% | Sep 6, 2026 | PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creat... |
| CVE-2022-26961 | MEDIUM | 5.4 | 0.1% | Sep 4, 2026 | Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and ... |
| CVE-2022-35499 | HIGH | 7.1 | 0.3% | Sep 4, 2026 | In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via inject... |
| CVE-2022-35497 | MEDIUM | 5.4 | 0.3% | Sep 4, 2026 | In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid se... |
| CVE-2022-51007 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2022-51006 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2022-51005 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2022-51004 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2022-51003 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2022-51002 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now