2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1135 | HIGH | 8.8 | 0.7% | Jul 23, 2022 | Use after free in Shopping Cart in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit... |
| CVE-2022-1134 | HIGH | 8.8 | 1.6% | Jul 23, 2022 | Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2022-1133 | HIGH | 8.8 | 0.7% | Jul 23, 2022 | Use after free in WebRTC Perf in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit h... |
| CVE-2022-1131 | HIGH | 8.8 | 0.7% | Jul 23, 2022 | Use after free in Cast UI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap ... |
| CVE-2022-1130 | HIGH | 8.1 | 0.7% | Jul 23, 2022 | Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote att... |
| CVE-2022-1127 | HIGH | 8.8 | 0.7% | Jul 23, 2022 | Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a us... |
| CVE-2022-1125 | HIGH | 8.8 | 0.7% | Jul 23, 2022 | Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to enga... |
| CVE-2022-1096 | HIGH | 8.8 | 24.2% | Jul 23, 2022 | Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corrup... |
| CVE-2022-34114 | HIGH | 8.8 | 0.8% | Jul 22, 2022 | Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId. |
| CVE-2022-33960 | HIGH | 8.8 | 0.8% | Jul 22, 2022 | Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by ... |
| CVE-2022-33901 | HIGH | 7.5 | 2.1% | Jul 22, 2022 | Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress. |
| CVE-2022-30998 | HIGH | 8.8 | 0.7% | Jul 22, 2022 | Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in WooPlugins.co's Homepage... |
| CVE-2022-27235 | HIGH | 8.8 | 0.7% | Jul 22, 2022 | Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress. |
| CVE-2022-0980 | HIGH | 8.8 | 0.5% | Jul 22, 2022 | Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to instal... |
| CVE-2022-0979 | HIGH | 8.8 | 0.7% | Jul 22, 2022 | Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convince... |
| CVE-2022-0978 | HIGH | 8.8 | 0.7% | Jul 22, 2022 | Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2022-28879 | HIGH | 7.5 | 0.4% | Jul 22, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the... |
| CVE-2022-28878 | HIGH | 7.5 | 0.4% | Jul 22, 2022 | A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scannin... |
| CVE-2022-34037 | HIGH | 7.5 | 1.0% | Jul 22, 2022 | An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers ... |
| CVE-2022-2138 | HIGH | 7.5 | 10.9% | Jul 22, 2022 | The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitiv... |
| CVE-2022-2135 | HIGH | 7.5 | 10.1% | Jul 22, 2022 | The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose info... |
| CVE-2022-31168 | HIGH | 8.8 | 0.6% | Jul 22, 2022 | Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a membe... |
| CVE-2022-2327 | HIGH | 7.8 | 0.3% | Jul 22, 2022 | io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent ... |
| CVE-2022-31172 | HIGH | 7.5 | 0.4% | Jul 22, 2022 | OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the Sig... |
| CVE-2022-31170 | HIGH | 7.5 | 0.6% | Jul 22, 2022 | OpenZeppelin Contracts is a library for smart contract development. Versions 4.0.0 until 4.7.1 are vulnerable to ERC165C... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now