2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-38553MEDIUM6.1Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulner...
CVE-2022-21169MEDIUM6.1The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allo...
CVE-2022-23461MEDIUM6.1Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vul...
CVE-2022-39242MEDIUM5.3Frontier is an Ethereum compatibility layer for Substrate. Prior to commit d3beddc6911a559a3ecc9b3f08e153dbe37a8658, the...
CVE-2022-39240MEDIUM5.4MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading...
CVE-2022-3278MEDIUM5.5NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.
CVE-2022-40132MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Seriously Simple Podcasting plugin <= 2.16.0 at WordPress, leading to...
CVE-2022-40103MEDIUM5.5Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability...
CVE-2022-38704MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 40...
CVE-2022-38439MEDIUM5.4Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi...
CVE-2022-38438MEDIUM5.4Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi...
CVE-2022-36340MEDIUM5.3Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress.
CVE-2022-35251MEDIUM5.4A cross-site scripting vulnerability exists in Rocket.chat <v5 due to style injection in the complete chat window, an ad...
CVE-2022-35250MEDIUM4.3A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any auth...
CVE-2022-35249MEDIUM4.3A information disclosure vulnerability exists in Rocket.Chat <v5 where the getUserMentionsByChannel meteor server method...
CVE-2022-35247MEDIUM4.3A information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the lack of ACL checks in th...
CVE-2022-35246MEDIUM4.3A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 in t...
CVE-2022-32849MEDIUM5.5An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.6 and iPadO...
CVE-2022-32848MEDIUM5.5A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5. An a...
CVE-2022-32841MEDIUM5.5The issue was addressed with improved memory handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadO...
CVE-2022-32832MEDIUM6.7The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11...
CVE-2022-32828MEDIUM5.5The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS...
CVE-2022-32825MEDIUM5.5The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11...
CVE-2022-32823MEDIUM5.5A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15...
CVE-2022-32818MEDIUM5.5The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5. An app may be able to...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now