2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2710 | MEDIUM | 4.8 | 0.5% | Sep 19, 2022 | The Scroll To Top WordPress plugin before 1.4.1 does not escape some of its settings, which could allow high privilege u... |
| CVE-2022-2709 | MEDIUM | 4.8 | 0.5% | Sep 19, 2022 | The Float to Top Button WordPress plugin through 2.3.6 does not escape some of its settings, which could allow high priv... |
| CVE-2022-2567 | MEDIUM | 4.8 | 0.5% | Sep 19, 2022 | The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could a... |
| CVE-2022-1591 | MEDIUM | 4.3 | 0.3% | Sep 19, 2022 | The WordPress Ping Optimizer WordPress plugin before 2.35.1.3.0 does not have CSRF check in place when updating its sett... |
| CVE-2022-1580 | MEDIUM | 4.3 | 1.3% | Sep 19, 2022 | The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a websit... |
| CVE-2022-40778 | MEDIUM | 5.4 | 0.4% | Sep 19, 2022 | A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to e... |
| CVE-2022-40775 | MEDIUM | 5.5 | 0.3% | Sep 18, 2022 | An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields. |
| CVE-2022-40774 | MEDIUM | 5.5 | 0.3% | Sep 18, 2022 | An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize. |
| CVE-2022-25873 | MEDIUM | 5.4 | 0.6% | Sep 18, 2022 | The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper inp... |
| CVE-2022-40768 | MEDIUM | 5.5 | 0.3% | Sep 18, 2022 | drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel me... |
| CVE-2022-3232 | MEDIUM | 4.3 | 0.3% | Sep 17, 2022 | Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5. |
| CVE-2022-39960 | MEDIUM | 5.3 | 25.7% | Sep 17, 2022 | The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. This might allow an... |
| CVE-2022-3231 | MEDIUM | 5.4 | 0.5% | Sep 17, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0. |
| CVE-2022-3173 | MEDIUM | 4.3 | 0.7% | Sep 17, 2022 | Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10. |
| CVE-2022-39212 | MEDIUM | 5.3 | 0.5% | Sep 17, 2022 | Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an at... |
| CVE-2022-39210 | MEDIUM | 5.5 | 0.3% | Sep 17, 2022 | Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud... |
| CVE-2022-39211 | MEDIUM | 5.3 | 0.7% | Sep 16, 2022 | Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webse... |
| CVE-2022-40755 | MEDIUM | 5.5 | 0.3% | Sep 16, 2022 | JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c. |
| CVE-2022-37709 | MEDIUM | 5.3 | 0.5% | Sep 16, 2022 | Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. ... |
| CVE-2022-37251 | MEDIUM | 5.4 | 0.4% | Sep 16, 2022 | Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts. |
| CVE-2022-37247 | MEDIUM | 5.4 | 0.4% | Sep 16, 2022 | Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page. |
| CVE-2022-35194 | MEDIUM | 5.4 | 0.5% | Sep 16, 2022 | TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventor... |
| CVE-2022-29489 | MEDIUM | 4.3 | 0.3% | Sep 16, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Sucuri Security plugin <= 1.8.33 at WordPress leading to Event log en... |
| CVE-2022-39006 | MEDIUM | 5.9 | 0.4% | Sep 16, 2022 | The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the devic... |
| CVE-2022-38428 | MEDIUM | 5.5 | 0.4% | Sep 16, 2022 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability th... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now