2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3244 | MEDIUM | 4.2 | 0.4% | Oct 17, 2022 | The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allo... |
| CVE-2022-3206 | MEDIUM | 5.9 | 0.5% | Oct 17, 2022 | The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encodin... |
| CVE-2022-3151 | MEDIUM | 4.3 | 0.3% | Oct 17, 2022 | The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could... |
| CVE-2022-3149 | MEDIUM | 6.1 | 0.3% | Oct 17, 2022 | The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors,... |
| CVE-2022-3139 | MEDIUM | 4.8 | 0.5% | Oct 17, 2022 | The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high p... |
| CVE-2022-3126 | MEDIUM | 4.3 | 0.3% | Oct 17, 2022 | The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could... |
| CVE-2022-3082 | MEDIUM | 6.5 | 0.4% | Oct 17, 2022 | The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJA... |
| CVE-2022-2834 | MEDIUM | 5.3 | 0.8% | Oct 17, 2022 | The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and gu... |
| CVE-2022-2574 | MEDIUM | 4.8 | 0.5% | Oct 17, 2022 | The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could ... |
| CVE-2022-2563 | MEDIUM | 4.8 | 0.6% | Oct 17, 2022 | The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege us... |
| CVE-2022-3533 | MEDIUM | 5.7 | 0.4% | Oct 17, 2022 | A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parse_usdt_... |
| CVE-2022-39052 | MEDIUM | 6.5 | 0.6% | Oct 17, 2022 | An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the... |
| CVE-2022-3524 | MEDIUM | 5.5 | 1.0% | Oct 16, 2022 | A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the fu... |
| CVE-2022-3523 | MEDIUM | 5.3 | 0.9% | Oct 16, 2022 | A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the... |
| CVE-2022-3519 | MEDIUM | 6.1 | 0.3% | Oct 15, 2022 | A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by th... |
| CVE-2022-3518 | MEDIUM | 4.8 | 0.5% | Oct 15, 2022 | A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected ... |
| CVE-2022-42961 | MEDIUM | 5.3 | 0.5% | Oct 15, 2022 | An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclo... |
| CVE-2022-42342 | MEDIUM | 5.5 | 0.5% | Oct 14, 2022 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds... |
| CVE-2022-39310 | MEDIUM | 6.5 | 0.6% | Oct 14, 2022 | GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous... |
| CVE-2022-39309 | MEDIUM | 6.5 | 0.8% | Oct 14, 2022 | GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous... |
| CVE-2022-38449 | MEDIUM | 5.5 | 2.2% | Oct 14, 2022 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds... |
| CVE-2022-38443 | MEDIUM | 5.5 | 0.3% | Oct 14, 2022 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi... |
| CVE-2022-38437 | MEDIUM | 5.5 | 2.6% | Oct 14, 2022 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Use After Free... |
| CVE-2022-38423 | MEDIUM | 4.9 | 45.0% | Oct 14, 2022 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a... |
| CVE-2022-35698 | MEDIUM | 5.4 | 9.7% | Oct 14, 2022 | Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vul... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now