2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4329 | MEDIUM | 6.1 | 0.5% | Jan 2, 2023 | The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before out... |
| CVE-2022-4260 | MEDIUM | 4.8 | 0.9% | Jan 2, 2023 | The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high priv... |
| CVE-2022-4256 | MEDIUM | 4.8 | 0.5% | Jan 2, 2023 | The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, whi... |
| CVE-2022-4236 | MEDIUM | 6.5 | 0.8% | Jan 2, 2023 | The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content ... |
| CVE-2022-4200 | MEDIUM | 4.8 | 0.5% | Jan 2, 2023 | The Login with Cognito WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which could all... |
| CVE-2022-4198 | MEDIUM | 4.8 | 0.6% | Jan 2, 2023 | The WP Social Sharing WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow ... |
| CVE-2022-4142 | MEDIUM | 4.8 | 0.5% | Jan 2, 2023 | The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufg... |
| CVE-2022-4119 | MEDIUM | 4.8 | 0.5% | Jan 2, 2023 | The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, wh... |
| CVE-2022-4114 | MEDIUM | 5.4 | 0.5% | Jan 2, 2023 | The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as ... |
| CVE-2022-4057 | MEDIUM | 5.3 | 1.5% | Jan 2, 2023 | The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs... |
| CVE-2022-3994 | MEDIUM | 4.3 | 0.8% | Jan 2, 2023 | The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, w... |
| CVE-2022-3936 | MEDIUM | 4.8 | 0.5% | Jan 2, 2023 | The Team Members WordPress plugin before 5.2.1 does not sanitize and escapes some of its settings, which could allow hig... |
| CVE-2022-48197 | MEDIUM | 6.1 | 6.6% | Jan 2, 2023 | Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, Tree... |
| CVE-2022-45213 | MEDIUM | 5.3 | 0.6% | Jan 1, 2023 | perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL. |
| CVE-2022-45027 | MEDIUM | 5.3 | 0.6% | Jan 1, 2023 | perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determin... |
| CVE-2022-40711 | MEDIUM | 4.8 | 0.5% | Jan 1, 2023 | PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can ... |
| CVE-2022-37787 | MEDIUM | 6.1 | 0.5% | Jan 1, 2023 | An issue was discovered in WeCube platform 3.2.2. A DOM XSS vulnerability has been found on the plugin database executio... |
| CVE-2022-37786 | MEDIUM | 6.3 | 0.5% | Jan 1, 2023 | An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resources... |
| CVE-2022-34323 | MEDIUM | 5.4 | 0.4% | Jan 1, 2023 | Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript ... |
| CVE-2022-4868 | MEDIUM | 4.3 | 0.6% | Dec 31, 2022 | Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1. |
| CVE-2022-4867 | MEDIUM | 4.3 | 0.3% | Dec 31, 2022 | Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1. |
| CVE-2022-4864 | MEDIUM | 5.4 | 0.5% | Dec 30, 2022 | Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1. |
| CVE-2022-42259 | MEDIUM | 5.5 | 0.3% | Dec 30, 2022 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer over... |
| CVE-2022-34683 | MEDIUM | 5.5 | 0.3% | Dec 30, 2022 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkD... |
| CVE-2022-34682 | MEDIUM | 5.5 | 0.2% | Dec 30, 2022 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular use... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now