2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4443 | MEDIUM | 6.5 | 0.3% | Jan 23, 2023 | The BruteBank WordPress plugin before 1.9 does not have CSRF check in place when updating its settings, which could allo... |
| CVE-2022-4383 | CRITICAL | 9.8 | 1.0% | Jan 23, 2023 | The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in... |
| CVE-2022-4346 | MEDIUM | 5.3 | 0.7% | Jan 23, 2023 | The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used ... |
| CVE-2022-4323 | HIGH | 7.2 | 1.0% | Jan 23, 2023 | The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high... |
| CVE-2022-4307 | MEDIUM | 6.1 | 0.5% | Jan 23, 2023 | The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenti... |
| CVE-2022-4305 | CRITICAL | 9.8 | 38.6% | Jan 23, 2023 | The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to... |
| CVE-2022-4303 | HIGH | 7.5 | 0.7% | Jan 23, 2023 | The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers ... |
| CVE-2022-4230 | HIGH | 8.8 | 34.3% | Jan 23, 2023 | The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow authenticated users to p... |
| CVE-2022-4017 | HIGH | 8.8 | 0.3% | Jan 23, 2023 | The Booster for WooCommerce WordPress plugin before 6.0.1, Booster Plus for WooCommerce WordPress plugin before 6.0.1, B... |
| CVE-2022-47065 | HIGH | 8.8 | 1.1% | Jan 23, 2023 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow... |
| CVE-2022-41505 | MEDIUM | 6.4 | 0.4% | Jan 23, 2023 | An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by c... |
| CVE-2022-3811 | MEDIUM | 4.8 | 0.5% | Jan 23, 2023 | The EU Cookie Law for GDPR/CCPA WordPress plugin through 3.1.6 does not sanitise and escape some of its settings, which ... |
| CVE-2022-3425 | HIGH | 7.2 | 1.0% | Jan 23, 2023 | The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high... |
| CVE-2022-0316 | CRITICAL | 9.8 | 2.1% | Jan 23, 2023 | The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme... |
| CVE-2022-46959 | MEDIUM | 4.3 | 0.8% | Jan 23, 2023 | An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal. |
| CVE-2022-48281 | MEDIUM | 5.5 | 0.5% | Jan 23, 2023 | processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of siz... |
| CVE-2022-3918 | HIGH | 8.8 | 0.8% | Jan 20, 2023 | A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URL... |
| CVE-2022-1109 | HIGH | 7.5 | 0.3% | Jan 20, 2023 | An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service. |
| CVE-2022-48279 | HIGH | 7.5 | 1.2% | Jan 20, 2023 | In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the W... |
| CVE-2022-48152 | CRITICAL | 9.8 | 0.8% | Jan 20, 2023 | SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive inform... |
| CVE-2022-48120 | CRITICAL | 9.8 | 0.9% | Jan 20, 2023 | SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9b... |
| CVE-2022-47024 | HIGH | 7.8 | 0.3% | Jan 20, 2023 | A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru... |
| CVE-2022-47021 | HIGH | 7.8 | 0.4% | Jan 20, 2023 | A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9... |
| CVE-2022-47016 | — | — | — | Jan 20, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-47015 | MEDIUM | 6.5 | 1.5% | Jan 20, 2023 | MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbas... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now