2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-1617MEDIUM6.1The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacki...
CVE-2022-1609CRITICAL9.8The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking co...
CVE-2022-1563MEDIUM5.3The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a s...
CVE-2022-1538HIGH7.2Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such ...
CVE-2022-0775MEDIUM4.3The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which coul...
CVE-2022-0402MEDIUM6.1The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bob_czy_panstwa_sprawa_zost...
CVE-2022-4962MEDIUM4.3A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown fu...
CVE-2022-4961CRITICAL9.8A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an ...
CVE-2022-48620CRITICAL9.8uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.
CVE-2022-4960MEDIUM5.4A vulnerability, which was classified as problematic, has been found in cloudfavorites favorites-web 1.3.0. Affected by ...
CVE-2022-48619MEDIUM5.5An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of s...
CVE-2022-4959MEDIUM6.1A vulnerability classified as problematic was found in qkmc-rk redbbs 1.0. Affected by this vulnerability is an unknown ...
CVE-2022-4958MEDIUM5.4A vulnerability classified as problematic has been found in qkmc-rk redbbs 1.0. Affected is an unknown function of the c...
CVE-2022-40361MEDIUM6.1Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language param...
CVE-2022-45794HIGH7.5An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network proto...
CVE-2022-48577MEDIUM5.5An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13. An app may be ...
CVE-2022-48504MEDIUM5.5The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to...
CVE-2022-47965HIGH7.8The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex...
CVE-2022-47915HIGH7.8The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex...
CVE-2022-46721HIGH7.8The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex...
CVE-2022-46710MEDIUM5.5A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. L...
CVE-2022-42839LOW3.3This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.2 and iPadOS 16...
CVE-2022-42816MEDIUM5.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able ...
CVE-2022-32931MEDIUM5.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app with root privil...
CVE-2022-32919MEDIUM4.7The issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now