2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-25776 | MEDIUM | 6.5 | 0.4% | Sep 18, 2024 | Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be ... |
| CVE-2022-25775 | HIGH | 7.2 | 0.6% | Sep 18, 2024 | Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports ... |
| CVE-2022-25774 | MEDIUM | 5.4 | 0.4% | Sep 18, 2024 | Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications ... |
| CVE-2022-25769 | CRITICAL | 9.1 | 0.5% | Sep 18, 2024 | ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be... |
| CVE-2022-39068 | MEDIUM | 6.5 | 0.4% | Sep 18, 2024 | There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an a... |
| CVE-2022-3459 | MEDIUM | 5.3 | 0.3% | Sep 14, 2024 | The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and in... |
| CVE-2022-2446 | HIGH | 7.2 | 0.6% | Sep 13, 2024 | The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' para... |
| CVE-2022-26322 | HIGH | 7.5 | 0.4% | Sep 12, 2024 | Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in Open... |
| CVE-2022-45856 | MEDIUM | 5.9 | 0.2% | Sep 10, 2024 | An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, ... |
| CVE-2022-27592 | MEDIUM | 6.7 | 0.2% | Sep 6, 2024 | An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnera... |
| CVE-2022-4529 | MEDIUM | 5.3 | 0.2% | Sep 5, 2024 | The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, a... |
| CVE-2022-3556 | MEDIUM | 4.8 | 0.3% | Sep 5, 2024 | The Cab fare calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vehicle title setting ... |
| CVE-2022-4539 | MEDIUM | 5.3 | 0.6% | Aug 31, 2024 | The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including,... |
| CVE-2022-4536 | MEDIUM | 5.3 | 0.2% | Aug 31, 2024 | The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1... |
| CVE-2022-4100 | MEDIUM | 5.3 | 0.3% | Aug 31, 2024 | The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 d... |
| CVE-2022-4538 | — | — | — | Aug 30, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a ... |
| CVE-2022-4528 | — | — | — | Aug 30, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a ... |
| CVE-2022-4412 | — | — | — | Aug 30, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a ... |
| CVE-2022-4540 | — | — | — | Aug 30, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a ... |
| CVE-2022-4530 | — | — | — | Aug 30, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a ... |
| CVE-2022-4424 | — | — | — | Aug 30, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a ... |
| CVE-2022-48944 | MEDIUM | 5.5 | 0.2% | Aug 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commi... |
| CVE-2022-2440 | HIGH | 7.2 | 0.7% | Aug 29, 2024 | The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' paramet... |
| CVE-2022-39997 | HIGH | 8 | 0.3% | Aug 27, 2024 | A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate pr... |
| CVE-2022-39996 | MEDIUM | 4.8 | 0.3% | Aug 27, 2024 | Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmd... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now