2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42485 | MEDIUM | 5.4 | 0.4% | Mar 21, 2023 | Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin <=... |
| CVE-2022-41831 | MEDIUM | 5.4 | 0.4% | Mar 21, 2023 | Auth. (contributor+) Cross-Site Scripting vulnerability in TCBarrett WP Glossary plugin <= 3.1.2 versions. |
| CVE-2022-41785 | MEDIUM | 5.4 | 0.4% | Mar 21, 2023 | Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Galleryape Gallery Images Ape plugin <= 2.2.8 versions... |
| CVE-2022-45124 | HIGH | 7.5 | 14.5% | Mar 20, 2023 | An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.0... |
| CVE-2022-43663 | CRITICAL | 9.8 | 14.0% | Mar 20, 2023 | An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.0... |
| CVE-2022-4148 | MEDIUM | 4.3 | 0.3% | Mar 20, 2023 | The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when ... |
| CVE-2022-3894 | MEDIUM | 4.3 | 0.3% | Mar 20, 2023 | The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client... |
| CVE-2022-47591 | MEDIUM | 6.1 | 0.4% | Mar 20, 2023 | Reflected Cross-Site Scripting (XSS) vulnerability in Mickael Austoni Map Multi Marker plugin <= 3.2.1 versions. |
| CVE-2022-47592 | MEDIUM | 6.1 | 0.4% | Mar 20, 2023 | Reflected Cross-Site Scripting (XSS) vulnerability in Dmytriy.Cooperman MagicForm plugin <= 0.1 versions. |
| CVE-2022-4933 | CRITICAL | 9.8 | 0.6% | Mar 20, 2023 | A vulnerability, which was classified as critical, has been found in ATM Consulting dolibarr_module_quicksupplierprice u... |
| CVE-2022-48425 | HIGH | 7.8 | 0.3% | Mar 19, 2023 | In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before r... |
| CVE-2022-48424 | HIGH | 7.8 | 0.3% | Mar 19, 2023 | In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault ... |
| CVE-2022-48423 | HIGH | 7.8 | 0.3% | Mar 19, 2023 | In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write m... |
| CVE-2022-48422 | HIGH | 7.8 | 0.3% | Mar 19, 2023 | ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libg... |
| CVE-2022-46867 | HIGH | 8.8 | 0.3% | Mar 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Chasil Universal Star Rating plugin <= 2.1.0 version. |
| CVE-2022-46854 | HIGH | 8.8 | 0.3% | Mar 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.... |
| CVE-2022-45817 | MEDIUM | 6.1 | 0.4% | Mar 17, 2023 | Cross-Site Scripting (XSS) vulnerability in Erin Garscadden GC Testimonials plugin <= 1.3.2 versions. |
| CVE-2022-45814 | MEDIUM | 5.4 | 0.4% | Mar 17, 2023 | Stored Cross-Site Scripting (XSS) vulnerability in Fabian von Allmen WP Calendar plugin <= 1.5.3 versions. |
| CVE-2022-43461 | MEDIUM | 5.4 | 0.4% | Mar 17, 2023 | Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions. |
| CVE-2022-43606 | HIGH | 7.5 | 8.0% | Mar 16, 2023 | A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP... |
| CVE-2022-43605 | CRITICAL | 9.8 | 14.4% | Mar 16, 2023 | An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack G... |
| CVE-2022-43604 | CRITICAL | 9.8 | 14.4% | Mar 16, 2023 | An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack G... |
| CVE-2022-43441 | CRITICAL | 9.8 | 2.4% | Mar 16, 2023 | A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A ... |
| CVE-2022-34423 | MEDIUM | 6.7 | 0.2% | Mar 16, 2023 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A ... |
| CVE-2022-26080 | MEDIUM | 4.3 | 0.4% | Mar 16, 2023 | Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Pl... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now