2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41217 | CRITICAL | 9.8 | 0.7% | Feb 22, 2023 | Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malici... |
| CVE-2022-41216 | MEDIUM | 6.5 | 0.6% | Feb 22, 2023 | Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the syste... |
| CVE-2022-2883 | HIGH | 7.5 | 1.0% | Feb 22, 2023 | In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Serv... |
| CVE-2022-38779 | MEDIUM | 6.1 | 0.5% | Feb 22, 2023 | An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if th... |
| CVE-2022-46637 | CRITICAL | 9.8 | 1.5% | Feb 21, 2023 | Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services. |
| CVE-2022-48282 | HIGH | 7.2 | 1.0% | Feb 21, 2023 | Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitra... |
| CVE-2022-45677 | CRITICAL | 9.8 | 0.9% | Feb 21, 2023 | SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student... |
| CVE-2022-45564 | CRITICAL | 9.8 | 0.8% | Feb 21, 2023 | SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute... |
| CVE-2022-3353 | HIGH | 7.5 | 1.1% | Feb 21, 2023 | A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attac... |
| CVE-2022-31394 | HIGH | 7.5 | 1.1% | Feb 21, 2023 | Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party ... |
| CVE-2022-4897 | MEDIUM | 6.1 | 0.9% | Feb 21, 2023 | The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back i... |
| CVE-2022-4791 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Product Slider and Carousel with Category for WooCommerce WordPress plugin before 2.8 does not validate and escape o... |
| CVE-2022-4786 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Video.js WordPress plugin through 4.5.0 does not validate and escape some of its shortcode attributes before outputt... |
| CVE-2022-4785 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Video Sidebar Widgets WordPress plugin through 6.1 does not validate and escape some of its shortcode attributes bef... |
| CVE-2022-4784 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2022-4777 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Bootstrap Shortcodes WordPress plugin through 3.4.0 does not validate and escape some of its shortcode attributes be... |
| CVE-2022-4764 | MEDIUM | 5.4 | 0.6% | Feb 21, 2023 | The Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode attributes ... |
| CVE-2022-4761 | MEDIUM | 5.4 | 0.6% | Feb 21, 2023 | The Post Views Count WordPress plugin through 3.0.2 does not validate and escape some of its shortcode attributes before... |
| CVE-2022-4754 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Easy Social Box / Page Plugin WordPress plugin through 4.1.2 does not validate and escape some of its shortcode attr... |
| CVE-2022-4752 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Opening Hours WordPress plugin through 2.3.0 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2022-4750 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The WP Responsive Testimonials Slider And Widget WordPress plugin through 1.5 does not validate and escape some of its s... |
| CVE-2022-4714 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could... |
| CVE-2022-4669 | MEDIUM | 5.4 | 0.4% | Feb 21, 2023 | The Page Builder: Live Composer WordPress plugin before 1.5.23 does not validate and escape some of its shortcode attrib... |
| CVE-2022-4666 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Markup (JSON-LD) structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its sh... |
| CVE-2022-4622 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes befor... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now