2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-4458MEDIUM5.4The amr shortcode any widget WordPress plugin through 4.0 does not validate and escape some of its shortcode attributes ...
CVE-2022-4448MEDIUM5.4The GiveWP WordPress plugin before 2.24.0 does not validate and escape some of its shortcode attributes before outputtin...
CVE-2022-4445CRITICAL9.8The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL...
CVE-2022-40022CRITICAL9.8Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.
CVE-2022-3891MEDIUM5.3The WP FullCalendar WordPress plugin before 1.5 does not ensure that the post retrieved via an AJAX action is public and...
CVE-2022-45725HIGH8.8Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute ar...
CVE-2022-45724MEDIUM5.4Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any...
CVE-2022-45455HIGH7.8Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber ...
CVE-2022-45454HIGH7.5Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent ...
CVE-2022-34397MEDIUM5.7 Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an ...
CVE-2022-48323CRITICAL9.8Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A...
CVE-2022-48322CRITICAL9.8NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affect...
CVE-2022-25937MEDIUM6.5Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outsid...
CVE-2022-43460HIGH7.5Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If ...
CVE-2022-4557CRITICAL9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Group Arge Energy ...
CVE-2022-47452MEDIUM5.5In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o...
CVE-2022-47451MEDIUM5.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-47450MEDIUM5.5In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47371MEDIUM5.5In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local...
CVE-2022-47370MEDIUM5.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-47369MEDIUM5.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-47368MEDIUM5.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-47367MEDIUM5.5In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additi...
CVE-2022-47366MEDIUM5.5In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o...
CVE-2022-47365MEDIUM5.5In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now