2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-2821HIGH7.5Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.
CVE-2022-2820HIGH8.2Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2.
CVE-2022-2819HIGH7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
CVE-2022-2818HIGH8.8Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2....
CVE-2022-2813HIGH7.5A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is a...
CVE-2022-2381HIGH8.8The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School ...
CVE-2022-2379HIGH7.5The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated us...
CVE-2022-2354HIGH7.2The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the s...
CVE-2022-35943HIGH8.8Shield is an authentication and authorization framework for CodeIgniter 4. This vulnerability may allow [SameSite Attack...
CVE-2022-2624HIGH8.8Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to en...
CVE-2022-2623HIGH8.8Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a u...
CVE-2022-2621HIGH8.8Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install...
CVE-2022-2620HIGH8.8Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a u...
CVE-2022-2617HIGH8.8Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to ins...
CVE-2022-2614HIGH8.8Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit ...
CVE-2022-2613HIGH8.8Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a u...
CVE-2022-2609HIGH8.8Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convin...
CVE-2022-2608HIGH8.8Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convi...
CVE-2022-2607HIGH8.8Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced...
CVE-2022-2606HIGH8.8Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a ...
CVE-2022-2604HIGH8.8Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit...
CVE-2022-2603HIGH8.8Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap ...
CVE-2022-35980HIGH7.5OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0....
CVE-2022-37423HIGH7.5Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling di...
CVE-2022-37041HIGH7.5An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. T...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now