2022 CVE Vulnerabilities

27,562 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-4935HIGH8.8The WCFM Marketplace plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up t...
CVE-2022-45115HIGH7.8A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially cr...
CVE-2022-43664HIGH7.8A use-after-free vulnerability exists within the way Ichitaro Word Processor 2022, version 1.0.1.57600, processes protec...
CVE-2022-48227HIGH7.8An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens No...
CVE-2022-48224HIGH7.3An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write ...
CVE-2022-48223MEDIUM6.7An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe is called by the Acuan...
CVE-2022-48222HIGH7.8An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the...
CVE-2022-48228MEDIUM5.5An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify an...
CVE-2022-48226HIGH7.8An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Wi...
CVE-2022-48225HIGH7.3An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers from several different v...
CVE-2022-48221HIGH7.5An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user wri...
CVE-2022-48435LOW3.3In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file
CVE-2022-47870MEDIUM6.1A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows r...
CVE-2022-41633HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration...
CVE-2022-4934HIGH7.2A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 ...
CVE-2022-4771MEDIUM6.1 Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malici...
CVE-2022-4770MEDIUM4.3 Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the fu...
CVE-2022-4769MEDIUM4.3 Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the ta...
CVE-2022-43941MEDIUM6.5 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly...
CVE-2022-43940HIGH8.8 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly...
CVE-2022-43939CRITICAL9.8Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security ...
CVE-2022-43938HIGH8.8 Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a...
CVE-2022-43772MEDIUM6.5 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Dat...
CVE-2022-43771MEDIUM6.5 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Penta...
CVE-2022-3960MEDIUM6.3 Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now