2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-33991 | MEDIUM | 5.3 | 0.8% | Aug 15, 2022 | dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This... |
| CVE-2022-33989 | MEDIUM | 5.3 | 0.8% | Aug 15, 2022 | dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream querie... |
| CVE-2022-33993 | MEDIUM | 5.3 | 0.7% | Aug 15, 2022 | Misinterpretation of special domain name characters in DNRD (aka Domain Name Relay Daemon) 2.20.3 leads to cache poisoni... |
| CVE-2022-35961 | MEDIUM | 6.5 | 0.3% | Aug 15, 2022 | OpenZeppelin Contracts is a library for secure smart contract development. The functions `ECDSA.recover` and `ECDSA.tryR... |
| CVE-2022-35954 | MEDIUM | 5 | 0.6% | Aug 15, 2022 | The GitHub Actions ToolKit provides a set of packages to make creating actions easier. The `core.exportVariable` functio... |
| CVE-2022-35948 | MEDIUM | 5.3 | 1.2% | Aug 15, 2022 | undici is an HTTP/1.1 client, written from scratch for Node.js.`=< undici@5.8.0` users are vulnerable to _CRLF Injection... |
| CVE-2022-2814 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Aff... |
| CVE-2022-2811 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unkn... |
| CVE-2022-2535 | MEDIUM | 5.3 | 1.5% | Aug 15, 2022 | The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited ... |
| CVE-2022-2384 | MEDIUM | 4.8 | 0.5% | Aug 15, 2022 | The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing ... |
| CVE-2022-2378 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it ba... |
| CVE-2022-2152 | MEDIUM | 4.8 | 0.5% | Aug 15, 2022 | The Duplicate Page and Post WordPress plugin before 2.8 does not sanitise and escape its settings, allowing high privile... |
| CVE-2022-2116 | MEDIUM | 6.1 | 0.5% | Aug 15, 2022 | The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them ba... |
| CVE-2022-35953 | MEDIUM | 6.1 | 0.5% | Aug 12, 2022 | BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to re... |
| CVE-2022-38183 | MEDIUM | 6.5 | 0.7% | Aug 12, 2022 | In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, a... |
| CVE-2022-2800 | MEDIUM | 6.1 | 0.5% | Aug 12, 2022 | A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected b... |
| CVE-2022-2622 | MEDIUM | 6.5 | 0.6% | Aug 12, 2022 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a... |
| CVE-2022-2619 | MEDIUM | 4.3 | 0.4% | Aug 12, 2022 | Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who c... |
| CVE-2022-2618 | MEDIUM | 6.5 | 0.6% | Aug 12, 2022 | Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacke... |
| CVE-2022-2616 | MEDIUM | 6.5 | 0.4% | Aug 12, 2022 | Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced... |
| CVE-2022-2615 | MEDIUM | 6.5 | 0.6% | Aug 12, 2022 | Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cro... |
| CVE-2022-2612 | MEDIUM | 6.5 | 0.6% | Aug 12, 2022 | Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who... |
| CVE-2022-2611 | MEDIUM | 4.3 | 0.5% | Aug 12, 2022 | Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attac... |
| CVE-2022-2610 | MEDIUM | 6.5 | 0.6% | Aug 12, 2022 | Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to... |
| CVE-2022-2605 | MEDIUM | 6.5 | 0.6% | Aug 12, 2022 | Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now