2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2594 | HIGH | 8.8 | 1.3% | Aug 22, 2022 | The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 all... |
| CVE-2022-2593 | HIGH | 7.2 | 1.1% | Aug 22, 2022 | The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before insertin... |
| CVE-2022-2557 | HIGH | 8.8 | 1.3% | Aug 22, 2022 | The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary f... |
| CVE-2022-2551 | HIGH | 7.5 | 12.5% | Aug 22, 2022 | The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the... |
| CVE-2022-2544 | HIGH | 7.5 | 3.2% | Aug 22, 2022 | The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, makin... |
| CVE-2022-2362 | HIGH | 7.5 | 1.0% | Aug 22, 2022 | The Download Manager WordPress plugin before 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over PH... |
| CVE-2022-25812 | HIGH | 7.2 | 1.4% | Aug 22, 2022 | The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allo... |
| CVE-2022-25811 | HIGH | 7.2 | 1.2% | Aug 22, 2022 | The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby pa... |
| CVE-2022-2930 | HIGH | 7.8 | 0.3% | Aug 22, 2022 | Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. |
| CVE-2022-30036 | HIGH | 8.8 | 0.8% | Aug 21, 2022 | MA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product ... |
| CVE-2022-2921 | HIGH | 8.8 | 1.1% | Aug 21, 2022 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.... |
| CVE-2022-38493 | HIGH | 7.5 | 0.3% | Aug 20, 2022 | Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. This all... |
| CVE-2022-2909 | HIGH | 8.8 | 0.7% | Aug 20, 2022 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script. It has been declared as critical. Affe... |
| CVE-2022-2793 | HIGH | 7.8 | 0.1% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity... |
| CVE-2022-2792 | HIGH | 7.5 | 0.4% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and ... |
| CVE-2022-36171 | HIGH | 8.1 | 0.6% | Aug 19, 2022 | MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion. |
| CVE-2022-36157 | HIGH | 8.8 | 1.2% | Aug 19, 2022 | XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin... |
| CVE-2022-36170 | HIGH | 8.8 | 0.8% | Aug 19, 2022 | MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitra... |
| CVE-2022-36009 | HIGH | 8.8 | 0.7% | Aug 19, 2022 | gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alte... |
| CVE-2022-2788 | HIGH | 7.3 | 0.2% | Aug 19, 2022 | Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename'... |
| CVE-2022-23460 | HIGH | 7.5 | 0.6% | Aug 19, 2022 | Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lea... |
| CVE-2022-36579 | HIGH | 8.8 | 0.4% | Aug 19, 2022 | Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF). |
| CVE-2022-36577 | HIGH | 8.8 | 0.4% | Aug 19, 2022 | An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin. |
| CVE-2022-36225 | HIGH | 8.8 | 0.4% | Aug 19, 2022 | EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management functio... |
| CVE-2022-36224 | HIGH | 8.8 | 0.4% | Aug 19, 2022 | XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF). |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now