2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-47148MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3...
CVE-2022-46806MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading t...
CVE-2022-46805MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin ...
CVE-2022-46798MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings chang...
CVE-2022-46797MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Conversios All-in-one Google Analytics, Pixels and Product Feed Manag...
CVE-2022-45804MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <=...
CVE-2022-40198MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in StandaloneTech TeraWallet – For WooCommerce plugin <= 1.3.24 leading ...
CVE-2022-38468MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin <= 3.28 lea...
CVE-2022-37935MEDIUM5.5HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.
CVE-2022-27672MEDIUM4.7When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling threa...
CVE-2022-20952MEDIUM5.3A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisc...
CVE-2022-38220MEDIUM6.1An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote inje...
CVE-2022-23240MEDIUM6.5Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a...
CVE-2022-23239MEDIUM4.8Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a...
CVE-2022-41727MEDIUM5.5An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConf...
CVE-2022-20551MEDIUM6.7In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic e...
CVE-2022-20481MEDIUM5.5In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead...
CVE-2022-20455MEDIUM5.5In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustio...
CVE-2022-47612MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.5 l...
CVE-2022-47179MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as ...
CVE-2022-46713MEDIUM4.7A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6....
CVE-2022-46705MEDIUM4.3A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is...
CVE-2022-46704MEDIUM5.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11....
CVE-2022-32906MEDIUM5.3This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music ...
CVE-2022-32902MEDIUM5.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now