2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-47158 | MEDIUM | 4.8 | 0.4% | Apr 24, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pakpobox alfred24 Click & Collect plugin <= 1.1.7 vers... |
| CVE-2022-45084 | MEDIUM | 6.1 | 0.4% | Apr 24, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions. |
| CVE-2022-48477 | CRITICAL | 9.8 | 0.5% | Apr 24, 2023 | In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing |
| CVE-2022-48476 | HIGH | 7.5 | 0.8% | Apr 24, 2023 | In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible |
| CVE-2022-45080 | HIGH | 8.8 | 0.3% | Apr 23, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in KrishaWeb Add Multiple Marker plugin <= 1.2 versions. |
| CVE-2022-45074 | HIGH | 8.8 | 0.3% | Apr 23, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Paramveer Singh for Arete IT Private Limited Activity Reactions For B... |
| CVE-2022-47435 | MEDIUM | 4.8 | 0.4% | Apr 23, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Olive Design WP-OliveCart plugin <= 1.1.3 versions. |
| CVE-2022-45361 | MEDIUM | 4.8 | 0.4% | Apr 23, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Boris Kuzmanov 0mk Shortener plugin <= 0.2 versions. |
| CVE-2022-44743 | MEDIUM | 5.4 | 0.4% | Apr 23, 2023 | Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.11.2 versi... |
| CVE-2022-44594 | MEDIUM | 4.8 | 0.4% | Apr 23, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Codebangers All in One Time Clock Lite plugin <= 1.3.3... |
| CVE-2022-44631 | MEDIUM | 5.4 | 0.4% | Apr 23, 2023 | Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in 1app Technologies, Inc 1app Business Forms plugin <= ... |
| CVE-2022-44582 | MEDIUM | 4.8 | 0.4% | Apr 23, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apptivo Apptivo Business Site CRM plugin <= 3.0.12 ver... |
| CVE-2022-4944 | HIGH | 8.8 | 2.7% | Apr 22, 2023 | A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by th... |
| CVE-2022-47509 | MEDIUM | 6.1 | 0.5% | Apr 21, 2023 | The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a... |
| CVE-2022-47505 | HIGH | 7.8 | 0.2% | Apr 21, 2023 | The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a loc... |
| CVE-2022-36963 | HIGH | 7.2 | 8.4% | Apr 21, 2023 | The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adver... |
| CVE-2022-47930 | MEDIUM | 6.8 | 0.5% | Apr 21, 2023 | An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used thro... |
| CVE-2022-48150 | MEDIUM | 6.1 | 0.6% | Apr 21, 2023 | Shopware v5.5.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the recovery/install/ URI. |
| CVE-2022-36788 | HIGH | 7.8 | 0.6% | Apr 20, 2023 | A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and ... |
| CVE-2022-46302 | HIGH | 8.8 | 0.4% | Apr 20, 2023 | Broad access controls could allow site users to directly interact with the system Apache installation when providing the... |
| CVE-2022-29944 | MEDIUM | 5.3 | 0.8% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing inten... |
| CVE-2022-29609 | MEDIUM | 5.3 | 0.6% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the INSTALLING state, indica... |
| CVE-2022-29608 | HIGH | 7.5 | 0.9% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. An intent with a port that is an intermediate point of its path installs an inval... |
| CVE-2022-29607 | HIGH | 7.5 | 0.7% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows ... |
| CVE-2022-29606 | CRITICAL | 9.8 | 1.0% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT state, which is misleading t... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now