2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0665 | MEDIUM | 6.5 | 1.5% | Feb 22, 2022 | Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2. |
| CVE-2022-0676 | HIGH | 7.8 | 1.2% | Feb 22, 2022 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
| CVE-2022-24564 | MEDIUM | 6.1 | 0.7% | Feb 21, 2022 | Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the ... |
| CVE-2022-0696 | MEDIUM | 5.5 | 1.5% | Feb 21, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. |
| CVE-2022-0563 | MEDIUM | 5.5 | 0.4% | Feb 21, 2022 | A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library use... |
| CVE-2022-25599 | MEDIUM | 4.3 | 0.4% | Feb 21, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress pl... |
| CVE-2022-24295 | HIGH | 8.8 | 17.9% | Feb 21, 2022 | Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection v... |
| CVE-2022-23984 | HIGH | 7.5 | 1.1% | Feb 21, 2022 | Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11). |
| CVE-2022-23983 | HIGH | 8.8 | 0.4% | Feb 21, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protecti... |
| CVE-2022-22308 | HIGH | 7.8 | 0.7% | Feb 21, 2022 | IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file inc... |
| CVE-2022-0708 | MEDIUM | 6.5 | 0.8% | Feb 21, 2022 | Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allo... |
| CVE-2022-0564 | MEDIUM | 5.3 | 1.4% | Feb 21, 2022 | A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An... |
| CVE-2022-0692 | MEDIUM | 6.1 | 3.4% | Feb 21, 2022 | Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1. |
| CVE-2022-24553 | CRITICAL | 9.8 | 2.5% | Feb 21, 2022 | An issue was found in Zfaka <= 1.4.5. The verification of the background file upload function check is not strict, resul... |
| CVE-2022-0313 | MEDIUM | 4.3 | 0.5% | Feb 21, 2022 | The Float menu WordPress plugin before 4.3.1 does not have CSRF check in place when deleting menu, which could allow att... |
| CVE-2022-0288 | MEDIUM | 6.1 | 2.4% | Feb 21, 2022 | The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escap... |
| CVE-2022-0279 | LOW | 3.1 | 0.5% | Feb 21, 2022 | The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, whi... |
| CVE-2022-0255 | HIGH | 7.2 | 1.3% | Feb 21, 2022 | The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter befor... |
| CVE-2022-0252 | MEDIUM | 6.1 | 0.9% | Feb 21, 2022 | The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute i... |
| CVE-2022-0234 | MEDIUM | 6.1 | 1.8% | Feb 21, 2022 | The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs_in_order_currency parameter of the wooc... |
| CVE-2022-0228 | HIGH | 7.2 | 5.8% | Feb 21, 2022 | The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters b... |
| CVE-2022-0211 | MEDIUM | 4.8 | 0.6% | Feb 21, 2022 | The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high priv... |
| CVE-2022-0199 | MEDIUM | 4.3 | 0.5% | Feb 21, 2022 | The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail... |
| CVE-2022-0186 | MEDIUM | 5.4 | 0.6% | Feb 21, 2022 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description fiel... |
| CVE-2022-0164 | MEDIUM | 4.3 | 0.3% | Feb 21, 2022 | The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its co... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now