2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42853 | MEDIUM | 5.5 | 0.2% | Dec 15, 2022 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.1. An app may b... |
| CVE-2022-42852 | MEDIUM | 6.5 | 0.9% | Dec 15, 2022 | The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1... |
| CVE-2022-42851 | MEDIUM | 5.5 | 0.3% | Dec 15, 2022 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2. Parsi... |
| CVE-2022-42846 | MEDIUM | 5.5 | 0.3% | Dec 15, 2022 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and i... |
| CVE-2022-42843 | MEDIUM | 5.5 | 0.4% | Dec 15, 2022 | This issue was addressed with improved data protection. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 1... |
| CVE-2022-42821 | MEDIUM | 5.5 | 3.9% | Dec 15, 2022 | A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, ma... |
| CVE-2022-40373 | MEDIUM | 5.4 | 0.5% | Dec 15, 2022 | Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of c... |
| CVE-2022-40002 | MEDIUM | 5.4 | 0.5% | Dec 15, 2022 | Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callbac... |
| CVE-2022-40001 | MEDIUM | 5.4 | 0.5% | Dec 15, 2022 | Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title f... |
| CVE-2022-40000 | MEDIUM | 5.4 | 0.5% | Dec 15, 2022 | Cross Site Scripting (XSS) vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the usernam... |
| CVE-2022-3427 | MEDIUM | 6.5 | 0.6% | Dec 15, 2022 | The Corner Ad plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.56.... |
| CVE-2022-32945 | MEDIUM | 4.3 | 0.3% | Dec 15, 2022 | An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ven... |
| CVE-2022-32943 | MEDIUM | 5.3 | 0.7% | Dec 15, 2022 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1... |
| CVE-2022-32916 | MEDIUM | 5.5 | 0.2% | Dec 15, 2022 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input ... |
| CVE-2022-32833 | MEDIUM | 5.3 | 0.6% | Dec 15, 2022 | An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is... |
| CVE-2022-32531 | MEDIUM | 5.9 | 1.0% | Dec 15, 2022 | The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server... |
| CVE-2022-2536 | MEDIUM | 5.3 | 1.4% | Dec 15, 2022 | The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticate... |
| CVE-2022-23507 | MEDIUM | 6.5 | 0.3% | Dec 15, 2022 | Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior t... |
| CVE-2022-23474 | MEDIUM | 6.1 | 0.5% | Dec 15, 2022 | Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via ... |
| CVE-2022-32763 | MEDIUM | 6.1 | 1.1% | Dec 15, 2022 | A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper la... |
| CVE-2022-29511 | MEDIUM | 6.5 | 2.5% | Dec 15, 2022 | A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweep... |
| CVE-2022-28703 | MEDIUM | 5.4 | 1.1% | Dec 15, 2022 | A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansw... |
| CVE-2022-27498 | MEDIUM | 6.5 | 38.3% | Dec 15, 2022 | A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lans... |
| CVE-2022-46768 | MEDIUM | 5.9 | 47.8% | Dec 15, 2022 | Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The s... |
| CVE-2022-4505 | MEDIUM | 4.3 | 0.7% | Dec 15, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now