2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-38367 | MEDIUM | 5.3 | 0.4% | Sep 5, 2022 | The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an ... |
| CVE-2022-3127 | MEDIUM | 5.4 | 0.5% | Sep 5, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8. |
| CVE-2022-2775 | MEDIUM | 5.5 | 0.6% | Sep 5, 2022 | The Fast Flow WordPress plugin before 1.2.13 does not sanitise and escape some of its Widget settings, which could allow... |
| CVE-2022-2657 | MEDIUM | 4.3 | 0.3% | Sep 5, 2022 | The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in... |
| CVE-2022-2597 | MEDIUM | 5.4 | 0.4% | Sep 5, 2022 | The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks... |
| CVE-2022-2543 | MEDIUM | 6.1 | 0.5% | Sep 5, 2022 | The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.18.0 does not have proper authorisation checks... |
| CVE-2022-2376 | MEDIUM | 5.3 | 1.4% | Sep 5, 2022 | The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to bo... |
| CVE-2022-2271 | MEDIUM | 4.8 | 0.4% | Sep 5, 2022 | The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privileg... |
| CVE-2022-3123 | MEDIUM | 6.1 | 0.9% | Sep 5, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a. |
| CVE-2022-38752 | MEDIUM | 6.5 | 2.0% | Sep 5, 2022 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is run... |
| CVE-2022-38751 | MEDIUM | 6.5 | 1.5% | Sep 5, 2022 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is run... |
| CVE-2022-38750 | MEDIUM | 5.5 | 1.0% | Sep 5, 2022 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is run... |
| CVE-2022-38749 | MEDIUM | 6.5 | 1.6% | Sep 5, 2022 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is run... |
| CVE-2022-39842 | MEDIUM | 6.1 | 0.6% | Sep 5, 2022 | An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the co... |
| CVE-2022-39050 | MEDIUM | 4.8 | 0.5% | Sep 5, 2022 | An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be ru... |
| CVE-2022-39049 | MEDIUM | 4.8 | 0.5% | Sep 5, 2022 | An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the cont... |
| CVE-2022-39840 | MEDIUM | 4.8 | 0.4% | Sep 5, 2022 | Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM). |
| CVE-2022-39839 | MEDIUM | 4.8 | 0.4% | Sep 5, 2022 | Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post. |
| CVE-2022-39196 | MEDIUM | 6.5 | 1.1% | Sep 5, 2022 | Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and t... |
| CVE-2022-36647 | MEDIUM | 5.5 | 0.3% | Sep 2, 2022 | PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at sou... |
| CVE-2022-36639 | MEDIUM | 5.4 | 0.5% | Sep 2, 2022 | A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to ex... |
| CVE-2022-36638 | MEDIUM | 5.3 | 0.7% | Sep 2, 2022 | An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to ... |
| CVE-2022-35933 | MEDIUM | 6.1 | 0.4% | Sep 2, 2022 | This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where ... |
| CVE-2022-34378 | MEDIUM | 5.5 | 0.2% | Sep 2, 2022 | Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative p... |
| CVE-2022-22101 | MEDIUM | 5.5 | 0.1% | Sep 2, 2022 | Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now