2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-48230 | HIGH | 7.5 | 0.5% | Feb 27, 2023 | There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to D... |
| CVE-2022-4829 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attribu... |
| CVE-2022-4795 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes... |
| CVE-2022-4788 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before output... |
| CVE-2022-4757 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The List Pages Shortcode WordPress plugin before 1.7.6 does not validate and escape some of its shortcode attributes bef... |
| CVE-2022-4679 | MEDIUM | 5.4 | 0.5% | Feb 27, 2023 | The Wufoo Shortcode WordPress plugin before 1.52 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2022-4550 | HIGH | 7.5 | 0.7% | Feb 27, 2023 | The User Activity WordPress plugin through 1.0.1 checks headers such as the X-Forwarded-For to retrieve the IP address o... |
| CVE-2022-45697 | HIGH | 7.8 | 0.3% | Feb 27, 2023 | Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory. |
| CVE-2022-45140 | CRITICAL | 9.8 | 1.1% | Feb 27, 2023 | The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, wh... |
| CVE-2022-45139 | MEDIUM | 5.3 | 0.3% | Feb 27, 2023 | A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic informa... |
| CVE-2022-45138 | CRITICAL | 9.8 | 0.7% | Feb 27, 2023 | The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated ... |
| CVE-2022-45137 | MEDIUM | 6.1 | 0.4% | Feb 27, 2023 | The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that... |
| CVE-2022-40237 | HIGH | 7.5 | 0.7% | Feb 27, 2023 | IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel syn... |
| CVE-2022-34910 | MEDIUM | 5.5 | 0.1% | Feb 27, 2023 | An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store dat... |
| CVE-2022-34909 | CRITICAL | 9.1 | 0.5% | Feb 27, 2023 | An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an ... |
| CVE-2022-34908 | HIGH | 7.5 | 0.6% | Feb 27, 2023 | An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechan... |
| CVE-2022-31405 | MEDIUM | 6.5 | 0.6% | Feb 27, 2023 | MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext. |
| CVE-2022-48363 | HIGH | 7.5 | 1.2% | Feb 26, 2023 | In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Dra... |
| CVE-2022-48362 | HIGH | 8.8 | 8.7% | Feb 25, 2023 | Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName ... |
| CVE-2022-2024 | CRITICAL | 9.8 | 97.8% | Feb 25, 2023 | OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11. |
| CVE-2022-23535 | CRITICAL | 9.8 | 0.7% | Feb 24, 2023 | LiteDB is a small, fast and lightweight .NET NoSQL embedded database. Versions prior to 5.0.13 are subject to Deserializ... |
| CVE-2022-44310 | HIGH | 7.5 | 0.7% | Feb 24, 2023 | In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obt... |
| CVE-2022-4203 | MEDIUM | 4.9 | 1.5% | Feb 24, 2023 | A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note... |
| CVE-2022-43923 | MEDIUM | 5.5 | 0.2% | Feb 24, 2023 | IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user... |
| CVE-2022-48345 | MEDIUM | 6.1 | 0.6% | Feb 24, 2023 | sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now