2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45067 | HIGH | 8.8 | 0.3% | Feb 2, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in DevsCred Exclusive Addons Elementor plugin <= 2.6.1 versions. |
| CVE-2022-44585 | HIGH | 8.8 | 0.3% | Feb 2, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Magneticlab Sàrl Homepage Pop-up plugin <= 1.2.5 versions. |
| CVE-2022-40692 | HIGH | 8.8 | 0.3% | Feb 2, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP Sunshine Sunshine Photo Cart plugin <= 2.9.13 versions. |
| CVE-2022-3560 | MEDIUM | 5.5 | 0.2% | Feb 2, 2023 | A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service ... |
| CVE-2022-36401 | HIGH | 8.8 | 0.3% | Feb 2, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in TeraWallet – For WooCommerce plugin <= 1.3.24 versions. |
| CVE-2022-46604 | HIGH | 8.8 | 8.6% | Feb 2, 2023 | An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanis... |
| CVE-2022-46552 | HIGH | 8.8 | 10.5% | Feb 2, 2023 | D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan... |
| CVE-2022-46965 | HIGH | 8.8 | 1.0% | Feb 2, 2023 | PrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability. |
| CVE-2022-43665 | MEDIUM | 5.5 | 0.3% | Feb 2, 2023 | A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-craft... |
| CVE-2022-2546 | MEDIUM | 4.7 | 1.2% | Feb 2, 2023 | The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the r... |
| CVE-2022-40269 | HIGH | 8.1 | 0.7% | Feb 2, 2023 | Authentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01... |
| CVE-2022-40268 | MEDIUM | 4.7 | 0.5% | Feb 2, 2023 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT2... |
| CVE-2022-33323 | HIGH | 7.5 | 1.1% | Feb 2, 2023 | Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Seri... |
| CVE-2022-37034 | MEDIUM | 5.3 | 0.9% | Feb 1, 2023 | In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to d... |
| CVE-2022-47872 | HIGH | 8.8 | 0.9% | Feb 1, 2023 | A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbit... |
| CVE-2022-45783 | MEDIUM | 6.5 | 8.5% | Feb 1, 2023 | An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the do... |
| CVE-2022-45782 | HIGH | 8.8 | 0.6% | Feb 1, 2023 | An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure ... |
| CVE-2022-3913 | MEDIUM | 5.3 | 0.3% | Feb 1, 2023 | Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177 fail to validate the certificate of the update server when ... |
| CVE-2022-37033 | MEDIUM | 6.5 | 0.8% | Feb 1, 2023 | In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to ... |
| CVE-2022-3083 | MEDIUM | 5.4 | 0.4% | Feb 1, 2023 | All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity... |
| CVE-2022-31364 | HIGH | 8.8 | 0.8% | Feb 1, 2023 | Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Over... |
| CVE-2022-31363 | HIGH | 8.8 | 0.8% | Feb 1, 2023 | Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Over... |
| CVE-2022-30904 | HIGH | 8.8 | 0.7% | Feb 1, 2023 | In Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer overflow vulnerability can be triggered during provisioning, b... |
| CVE-2022-46934 | MEDIUM | 6.1 | 1.1% | Feb 1, 2023 | kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /control... |
| CVE-2022-47983 | MEDIUM | 5.4 | 0.4% | Feb 1, 2023 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now