2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42858 | HIGH | 7.8 | 0.2% | Apr 10, 2023 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.1. An ap... |
| CVE-2022-32871 | LOW | 2.4 | 0.3% | Apr 10, 2023 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to ... |
| CVE-2022-41976 | HIGH | 8.8 | 1.6% | Apr 10, 2023 | An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticate... |
| CVE-2022-4827 | MEDIUM | 5.4 | 0.5% | Apr 10, 2023 | The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputt... |
| CVE-2022-39048 | MEDIUM | 6.1 | 1.1% | Apr 10, 2023 | A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an atta... |
| CVE-2022-37462 | MEDIUM | 5.4 | 0.6% | Apr 10, 2023 | A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse t... |
| CVE-2022-43309 | MEDIUM | 5.5 | 0.2% | Apr 7, 2023 | Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions. |
| CVE-2022-43928 | MEDIUM | 6.5 | 0.6% | Apr 7, 2023 | The IBM Toolbox for Java (Db2 Mirror for i 7.4 and 7.5) could allow a user to obtain sensitive information, caused by ut... |
| CVE-2022-43914 | MEDIUM | 5.4 | 0.4% | Apr 7, 2023 | IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb... |
| CVE-2022-33959 | HIGH | 8.1 | 0.5% | Apr 7, 2023 | IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of... |
| CVE-2022-34333 | HIGH | 7.5 | 0.6% | Apr 7, 2023 | IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it ... |
| CVE-2022-32599 | MEDIUM | 6.7 | 0.1% | Apr 6, 2023 | In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege ... |
| CVE-2022-46781 | LOW | 3.3 | 0.2% | Apr 6, 2023 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing... |
| CVE-2022-46793 | HIGH | 8.8 | 0.2% | Apr 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in AdTribes.Io Product Feed PRO for WooCommerce plugin <= 12.4.4 version... |
| CVE-2022-31890 | CRITICAL | 9.8 | 1.5% | Apr 5, 2023 | SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb... |
| CVE-2022-31889 | MEDIUM | 6.1 | 0.7% | Apr 5, 2023 | Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commi... |
| CVE-2022-31888 | HIGH | 8.8 | 1.2% | Apr 5, 2023 | Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2. |
| CVE-2022-3513 | MEDIUM | 6.1 | 0.7% | Apr 5, 2023 | An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting fr... |
| CVE-2022-3375 | LOW | 3.7 | 0.8% | Apr 5, 2023 | An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting f... |
| CVE-2022-4941 | HIGH | 8.8 | 0.3% | Apr 5, 2023 | The WCFM Membership plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2... |
| CVE-2022-4940 | MEDIUM | 6.5 | 1.1% | Apr 5, 2023 | The WCFM Membership plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to... |
| CVE-2022-4939 | CRITICAL | 9.8 | 2.1% | Apr 5, 2023 | THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, ... |
| CVE-2022-4938 | HIGH | 8.8 | 0.2% | Apr 5, 2023 | The WCFM Frontend Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ... |
| CVE-2022-4937 | HIGH | 8.8 | 0.6% | Apr 5, 2023 | The WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and access of data in versions... |
| CVE-2022-4936 | HIGH | 8.8 | 0.2% | Apr 5, 2023 | The WCFM Marketplace plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now