2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32597 | MEDIUM | 6.7 | 0.1% | Dec 5, 2022 | In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati... |
| CVE-2022-32596 | MEDIUM | 6.7 | 0.1% | Dec 5, 2022 | In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati... |
| CVE-2022-32594 | MEDIUM | 6.7 | 0.1% | Dec 5, 2022 | In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati... |
| CVE-2022-45824 | MEDIUM | 6.5 | 0.2% | Dec 5, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress. |
| CVE-2022-43504 | MEDIUM | 5.3 | 1.4% | Dec 5, 2022 | Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to o... |
| CVE-2022-43500 | MEDIUM | 6.1 | 0.7% | Dec 5, 2022 | Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inje... |
| CVE-2022-43499 | MEDIUM | 5.4 | 0.8% | Dec 5, 2022 | Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker ... |
| CVE-2022-43497 | MEDIUM | 6.1 | 1.0% | Dec 5, 2022 | Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inje... |
| CVE-2022-43487 | MEDIUM | 6.1 | 0.8% | Dec 5, 2022 | Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacke... |
| CVE-2022-43479 | MEDIUM | 6.1 | 0.9% | Dec 5, 2022 | Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users t... |
| CVE-2022-43442 | MEDIUM | 4.6 | 0.3% | Dec 5, 2022 | Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow ... |
| CVE-2022-41830 | MEDIUM | 4.8 | 0.8% | Dec 5, 2022 | Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated ... |
| CVE-2022-41807 | MEDIUM | 6.5 | 0.5% | Dec 5, 2022 | Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-ad... |
| CVE-2022-41798 | MEDIUM | 6.5 | 0.6% | Dec 5, 2022 | Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may all... |
| CVE-2022-40968 | MEDIUM | 6.1 | 0.4% | Dec 4, 2022 | Reflected Cross-Site Scripting (XSS) vulnerability in 2kb Amazon Affiliates Store plugin <=2.1.5 on WordPress. |
| CVE-2022-35730 | MEDIUM | 6.5 | 0.2% | Dec 4, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky header plugin <= 1.0.8 on WordPress. |
| CVE-2022-46391 | MEDIUM | 6.1 | 0.7% | Dec 4, 2022 | AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper che... |
| CVE-2022-4279 | MEDIUM | 6.1 | 0.5% | Dec 3, 2022 | A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affecte... |
| CVE-2022-4220 | MEDIUM | 4.3 | 0.4% | Dec 2, 2022 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.... |
| CVE-2022-4219 | MEDIUM | 4.3 | 0.4% | Dec 2, 2022 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.... |
| CVE-2022-4218 | MEDIUM | 4.3 | 0.4% | Dec 2, 2022 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.... |
| CVE-2022-4217 | MEDIUM | 4.8 | 0.6% | Dec 2, 2022 | The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key' parameter in versio... |
| CVE-2022-4216 | MEDIUM | 4.8 | 0.6% | Dec 2, 2022 | The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook_appid' parameter in... |
| CVE-2022-4215 | MEDIUM | 6.1 | 0.9% | Dec 2, 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date' parameter on the 'c... |
| CVE-2022-4214 | MEDIUM | 6.1 | 0.8% | Dec 2, 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter on the 'cha... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now