2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2527 | HIGH | 8 | 0.8% | Oct 17, 2022 | An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1... |
| CVE-2022-2428 | HIGH | 7.3 | 0.8% | Oct 17, 2022 | A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 1... |
| CVE-2022-23771 | HIGH | 8.8 | 0.3% | Oct 17, 2022 | This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerabilit... |
| CVE-2022-41498 | HIGH | 7.2 | 0.7% | Oct 17, 2022 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventor... |
| CVE-2022-3550 | HIGH | 8.8 | 1.4% | Oct 17, 2022 | A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCou... |
| CVE-2022-3549 | HIGH | 7.2 | 0.5% | Oct 17, 2022 | A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic.... |
| CVE-2022-3545 | HIGH | 7.8 | 0.4% | Oct 17, 2022 | A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the functio... |
| CVE-2022-3541 | HIGH | 7.8 | 0.3% | Oct 17, 2022 | A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2sw_nvmem_get_mac_ad... |
| CVE-2022-3243 | HIGH | 7.2 | 1.0% | Oct 17, 2022 | The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before u... |
| CVE-2022-3150 | HIGH | 7.2 | 0.9% | Oct 17, 2022 | The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a... |
| CVE-2022-3131 | HIGH | 7.2 | 0.9% | Oct 17, 2022 | The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQ... |
| CVE-2022-3534 | HIGH | 8 | 0.9% | Oct 17, 2022 | A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function... |
| CVE-2022-3501 | HIGH | 7.5 | 0.4% | Oct 17, 2022 | Article template contents with sensitive data could be accessed from agents without permissions. |
| CVE-2022-3281 | HIGH | 7.5 | 0.7% | Oct 17, 2022 | WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are... |
| CVE-2022-42983 | HIGH | 8.8 | 1.2% | Oct 17, 2022 | anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens. |
| CVE-2022-42975 | HIGH | 7.5 | 0.5% | Oct 17, 2022 | socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffe... |
| CVE-2022-3526 | HIGH | 7.5 | 0.9% | Oct 16, 2022 | A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_han... |
| CVE-2022-42969 | HIGH | 7.5 | 1.5% | Oct 16, 2022 | The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Servic... |
| CVE-2022-41323 | HIGH | 7.5 | 2.7% | Oct 16, 2022 | In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential ... |
| CVE-2022-42341 | HIGH | 7.5 | 35.5% | Oct 14, 2022 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of ... |
| CVE-2022-42340 | HIGH | 7.5 | 33.8% | Oct 14, 2022 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validatio... |
| CVE-2022-42339 | HIGH | 7.8 | 2.9% | Oct 14, 2022 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Bu... |
| CVE-2022-41623 | HIGH | 7.5 | 0.7% | Oct 14, 2022 | Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.... |
| CVE-2022-41416 | HIGH | 7.2 | 0.7% | Oct 14, 2022 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet... |
| CVE-2022-39311 | HIGH | 8.8 | 1.6% | Oct 14, 2022 | GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now