2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-41342HIGH7.8Improper buffer restrictions in the Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolk...
CVE-2022-40196HIGH7.8Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classic...
CVE-2022-38136HIGH7.3Uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows be...
CVE-2022-2933MEDIUM5.4The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2...
CVE-2022-47071CRITICAL9.8In NVS365 V01, the background network test function can trigger command execution.
CVE-2022-48078CRITICAL9.8pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTre...
CVE-2022-48019HIGH7.8The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to per...
CVE-2022-48164HIGH7.5An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthen...
CVE-2022-48085MEDIUM5.4Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.
CVE-2022-44343HIGH7.5CRMEB 4.4.4 is vulnerable to Any File download.
CVE-2022-45722MEDIUM6.1ezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability.
CVE-2022-29416MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Afterpay Gateway for WooCommerce <= 3.5.0 versions.
CVE-2022-27628MEDIUM6.5Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions.
CVE-2022-25855HIGH7.8All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to impr...
CVE-2022-25853HIGH7.8All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to imp...
CVE-2022-45786HIGH8.1There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for Po...
CVE-2022-24895HIGH8.8Symfony is a PHP framework for web and console applications and a set of reusable PHP components. When authenticating us...
CVE-2022-24894HIGH8.8Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache...
CVE-2022-23498HIGH8.8Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana c...
CVE-2022-48165HIGH7.5An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthen...
CVE-2022-47762HIGH7.5In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.
CVE-2022-47070HIGH7.5NVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url will be sent to the serve...
CVE-2022-45588HIGH7.8All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) typ...
CVE-2022-45496HIGH7.8Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b15...
CVE-2022-45493HIGH7.8Buffer overflow vulnerability in function json_parse_key in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now