2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4677 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, whi... |
| CVE-2022-4674 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could all... |
| CVE-2022-4670 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The PDF.js Viewer WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before out... |
| CVE-2022-4664 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outpu... |
| CVE-2022-4657 | MEDIUM | 5.4 | 0.7% | Feb 6, 2023 | The Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before o... |
| CVE-2022-4626 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The PPWP WordPress plugin before 1.8.6 does not validate and escape some of its shortcode attributes before outputting t... |
| CVE-2022-4577 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | The Easy Testimonials WordPress plugin before 3.9.3 does not validate and escape some of its shortcode attributes before... |
| CVE-2022-4459 | MEDIUM | 5.4 | 0.7% | Feb 6, 2023 | The WP Show Posts WordPress plugin before 1.1.4 does not validate and escape some of its shortcode attributes before out... |
| CVE-2022-4384 | MEDIUM | 6.5 | 0.9% | Feb 6, 2023 | The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) fr... |
| CVE-2022-4321 | MEDIUM | 6.1 | 1.2% | Feb 6, 2023 | The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Refl... |
| CVE-2022-32656 | MEDIUM | 6.7 | 0.3% | Feb 6, 2023 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala... |
| CVE-2022-32655 | MEDIUM | 6.7 | 0.3% | Feb 6, 2023 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala... |
| CVE-2022-32654 | MEDIUM | 6.7 | 0.3% | Feb 6, 2023 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala... |
| CVE-2022-32643 | MEDIUM | 6.4 | 0.2% | Feb 6, 2023 | In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit... |
| CVE-2022-32642 | MEDIUM | 6.4 | 0.1% | Feb 6, 2023 | In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege ... |
| CVE-2022-32595 | MEDIUM | 4.4 | 0.1% | Feb 6, 2023 | In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local informati... |
| CVE-2022-4902 | MEDIUM | 6.1 | 0.6% | Feb 6, 2023 | A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the... |
| CVE-2022-2933 | MEDIUM | 5.4 | 0.5% | Feb 6, 2023 | The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2... |
| CVE-2022-48085 | MEDIUM | 5.4 | 0.6% | Feb 6, 2023 | Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter. |
| CVE-2022-45722 | MEDIUM | 6.1 | 0.4% | Feb 6, 2023 | ezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability. |
| CVE-2022-29416 | MEDIUM | 6.1 | 0.4% | Feb 6, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Afterpay Gateway for WooCommerce <= 3.5.0 versions. |
| CVE-2022-27628 | MEDIUM | 6.5 | 0.2% | Feb 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions. |
| CVE-2022-42909 | MEDIUM | 5.4 | 0.4% | Feb 3, 2023 | WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and ass... |
| CVE-2022-42908 | MEDIUM | 5.4 | 0.4% | Feb 3, 2023 | WEPA Print Away is vulnerable to a stored XSS. It does not properly sanitize uploaded filenames, allowing an attacker to... |
| CVE-2022-48074 | MEDIUM | 5.3 | 0.2% | Feb 3, 2023 | An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now