2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3056 | MEDIUM | 6.5 | 0.9% | Sep 26, 2022 | Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195.52 allowed a remote atta... |
| CVE-2022-3054 | MEDIUM | 6.5 | 0.6% | Sep 26, 2022 | Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potenti... |
| CVE-2022-3053 | MEDIUM | 4.3 | 0.5% | Sep 26, 2022 | Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker to... |
| CVE-2022-3048 | MEDIUM | 6.8 | 0.4% | Sep 26, 2022 | Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a loca... |
| CVE-2022-3047 | MEDIUM | 6.5 | 0.4% | Sep 26, 2022 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convin... |
| CVE-2022-3044 | MEDIUM | 6.5 | 0.8% | Sep 26, 2022 | Inappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had... |
| CVE-2022-2861 | MEDIUM | 6.5 | 0.6% | Sep 26, 2022 | Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convince... |
| CVE-2022-2860 | MEDIUM | 6.5 | 0.8% | Sep 26, 2022 | Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass ... |
| CVE-2022-2856 | MEDIUM | 6.5 | 4.5% | Sep 26, 2022 | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remo... |
| CVE-2022-39219 | MEDIUM | 6.5 | 0.9% | Sep 26, 2022 | Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.... |
| CVE-2022-3299 | MEDIUM | 6.5 | 0.9% | Sep 26, 2022 | A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability i... |
| CVE-2022-3135 | MEDIUM | 4.8 | 0.5% | Sep 26, 2022 | The SEO Smart Links WordPress plugin through 3.0.1 does not sanitise and escape some of its settings, which could allow ... |
| CVE-2022-3098 | MEDIUM | 4.3 | 0.3% | Sep 26, 2022 | The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which c... |
| CVE-2022-3074 | MEDIUM | 4.8 | 0.5% | Sep 26, 2022 | The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users t... |
| CVE-2022-3070 | MEDIUM | 4.8 | 0.5% | Sep 26, 2022 | The Generate PDF WordPress plugin before 3.6 does not sanitise and escape its settings, allowing high privilege users su... |
| CVE-2022-3069 | MEDIUM | 4.8 | 0.5% | Sep 26, 2022 | The WordLift WordPress plugin before 3.37.2 does not sanitise and escape its settings, allowing high privilege users suc... |
| CVE-2022-3062 | MEDIUM | 6.1 | 37.4% | Sep 26, 2022 | The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes... |
| CVE-2022-3025 | MEDIUM | 5.4 | 0.2% | Sep 26, 2022 | The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allow... |
| CVE-2022-3024 | MEDIUM | 5.4 | 0.2% | Sep 26, 2022 | The Simple Bitcoin Faucets WordPress plugin through 1.7.0 does not have any authorisation and CSRF in an AJAX action, al... |
| CVE-2022-2926 | MEDIUM | 4.9 | 1.3% | Sep 26, 2022 | The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privil... |
| CVE-2022-2405 | MEDIUM | 4.3 | 0.3% | Sep 26, 2022 | The WP Popup Builder WordPress plugin before 1.2.9 does not have authorisation and CSRF check in an AJAX action, allowin... |
| CVE-2022-2404 | MEDIUM | 6.1 | 0.5% | Sep 26, 2022 | The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in... |
| CVE-2022-1755 | MEDIUM | 5.4 | 0.5% | Sep 26, 2022 | The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with ... |
| CVE-2022-1613 | MEDIUM | 5.3 | 0.6% | Sep 26, 2022 | The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers ov... |
| CVE-2022-38970 | MEDIUM | 6.5 | 1.0% | Sep 26, 2022 | ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now