2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-34965HIGH7.2OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-35650HIGH7.5The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insuff...
CVE-2022-26307HIGH8.8LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passw...
CVE-2022-26306HIGH7.5LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passw...
CVE-2022-26305HIGH7.5An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a tru...
CVE-2022-2522HIGH7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.
CVE-2022-1314HIGH8.8Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corru...
CVE-2022-1313HIGH8.8Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit he...
CVE-2022-1311HIGH8.8Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially exp...
CVE-2022-1310HIGH8.8Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially e...
CVE-2022-1308HIGH8.8Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap ...
CVE-2022-1305HIGH8.8Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap ...
CVE-2022-1232HIGH8.8Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corru...
CVE-2022-2240HIGH8.8The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users ...
CVE-2022-2219HIGH7.2The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page...
CVE-2022-1539HIGH8.8The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to exp...
CVE-2022-29709HIGH7.5CommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection vulnerabilities via the ...
CVE-2022-24294HIGH7.5A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resou...
CVE-2022-36415HIGH7.8A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when i...
CVE-2022-1145HIGH7.5Use after free in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install...
CVE-2022-1144HIGH8.8Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage...
CVE-2022-1143HIGH8.8Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to ...
CVE-2022-1142HIGH8.8Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to ...
CVE-2022-1141HIGH8.8Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to...
CVE-2022-1136HIGH8.8Use after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now