2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-35721 | MEDIUM | 5.4 | 0.5% | Sep 23, 2022 | IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to e... |
| CVE-2022-35099 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixel(unsigned char*) at /xpdf/S... |
| CVE-2022-35098 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColor(Gfx... |
| CVE-2022-35097 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrue... |
| CVE-2022-35096 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c. |
| CVE-2022-35095 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev::type3D1 at /pdf/InfoOutpu... |
| CVE-2022-35094 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /... |
| CVE-2022-35093 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream::transformDataUnit at /xpdf/St... |
| CVE-2022-35092 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via convert_gfxline at /gfxpoly/convert.c. |
| CVE-2022-35091 | MEDIUM | 5.5 | 0.4% | Sep 23, 2022 | SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf... |
| CVE-2022-22423 | MEDIUM | 5.5 | 0.2% | Sep 23, 2022 | IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow a local user to cause ... |
| CVE-2022-40215 | MEDIUM | 5.4 | 0.4% | Sep 23, 2022 | Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in Tabs plugin <= 3.7.1 at WordPress. |
| CVE-2022-36417 | MEDIUM | 6.1 | 0.2% | Sep 23, 2022 | Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in 3D Tag Cloud plugin <=... |
| CVE-2022-40672 | MEDIUM | 4.8 | 0.4% | Sep 23, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress. |
| CVE-2022-40671 | MEDIUM | 4.3 | 0.3% | Sep 23, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress. |
| CVE-2022-40195 | MEDIUM | 4.8 | 0.4% | Sep 23, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PCA Predict plugin <= 1.0.3 at WordPress. |
| CVE-2022-40193 | MEDIUM | 6.1 | 0.5% | Sep 23, 2022 | Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordP... |
| CVE-2022-3257 | MEDIUM | 6.5 | 1.1% | Sep 23, 2022 | Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded w... |
| CVE-2022-38460 | MEDIUM | 5.4 | 0.4% | Sep 23, 2022 | Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in NOTICE BOARD plugin <= 1.1 at WordPress. |
| CVE-2022-38061 | MEDIUM | 5.7 | 0.6% | Sep 23, 2022 | Authenticated (author+) CSV Injection vulnerability in Export Post Info plugin <= 1.2.0 at WordPress. |
| CVE-2022-37342 | MEDIUM | 4.8 | 0.5% | Sep 23, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability Add Shortcodes Actions And Filters plugin <= 2.0.... |
| CVE-2022-37328 | MEDIUM | 5.4 | 0.4% | Sep 23, 2022 | Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in Themes Awesome History Timeline plugin <= 1.0... |
| CVE-2022-36791 | MEDIUM | 5.4 | 0.4% | Sep 23, 2022 | Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Awesome UG Torro Forms plugin <= 1.0.16 ... |
| CVE-2022-35238 | MEDIUM | 5.3 | 0.5% | Sep 23, 2022 | Unauthenticated Plugin Settings Change vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress. |
| CVE-2022-40213 | MEDIUM | 5.4 | 0.4% | Sep 23, 2022 | Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in GS Testimonial Slider plugin ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now