2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26858 | HIGH | 7.8 | 0.2% | Sep 6, 2022 | Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potent... |
| CVE-2022-3134 | HIGH | 7.8 | 0.6% | Sep 6, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0389. |
| CVE-2022-37185 | HIGH | 7.5 | 0.7% | Sep 6, 2022 | SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system o... |
| CVE-2022-36058 | HIGH | 7.5 | 1.0% | Sep 6, 2022 | Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.34, anyone who uses elrond-... |
| CVE-2022-36044 | HIGH | 7.8 | 0.4% | Sep 6, 2022 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to ... |
| CVE-2022-36043 | HIGH | 7.8 | 0.4% | Sep 6, 2022 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to ... |
| CVE-2022-36041 | HIGH | 7.8 | 0.4% | Sep 6, 2022 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to ... |
| CVE-2022-36040 | HIGH | 7.8 | 0.4% | Sep 6, 2022 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to ... |
| CVE-2022-36042 | HIGH | 7.8 | 0.4% | Sep 6, 2022 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to ... |
| CVE-2022-36039 | HIGH | 7.8 | 0.4% | Sep 6, 2022 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to ... |
| CVE-2022-36038 | HIGH | 7.8 | 0.9% | Sep 6, 2022 | CircuitVerse is an open-source platform which allows users to construct digital logic circuits online. A remote code exe... |
| CVE-2022-31791 | HIGH | 7.8 | 0.2% | Sep 6, 2022 | WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their p... |
| CVE-2022-3026 | HIGH | 8.8 | 1.1% | Sep 6, 2022 | The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via th... |
| CVE-2022-35847 | HIGH | 8.8 | 0.7% | Sep 6, 2022 | An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR managemen... |
| CVE-2022-32264 | HIGH | 7.5 | 0.7% | Sep 6, 2022 | sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling ... |
| CVE-2022-31790 | HIGH | 7.5 | 1.5% | Sep 6, 2022 | WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication serv... |
| CVE-2022-30298 | HIGH | 7.8 | 0.2% | Sep 6, 2022 | An improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1 allows a GUI user who has al... |
| CVE-2022-2735 | HIGH | 7.8 | 0.3% | Sep 6, 2022 | A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for i... |
| CVE-2022-2633 | HIGH | 8.2 | 24.5% | Sep 6, 2022 | The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side reques... |
| CVE-2022-2542 | HIGH | 8.8 | 0.5% | Sep 6, 2022 | The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in v... |
| CVE-2022-2541 | HIGH | 8.8 | 0.5% | Sep 6, 2022 | The uContext for Amazon plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in vers... |
| CVE-2022-2540 | HIGH | 8.8 | 0.5% | Sep 6, 2022 | The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in vers... |
| CVE-2022-2442 | HIGH | 7.2 | 1.3% | Sep 6, 2022 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to deserialization of untrusted input via th... |
| CVE-2022-2438 | HIGH | 7.2 | 1.3% | Sep 6, 2022 | The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' val... |
| CVE-2022-2436 | HIGH | 8.8 | 1.3% | Sep 6, 2022 | The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'file[package_dir]... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now