2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0722 | HIGH | 7.5 | 1.1% | Jun 27, 2022 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0. |
| CVE-2022-1977 | HIGH | 7.2 | 1.3% | Jun 27, 2022 | The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the fil... |
| CVE-2022-1903 | HIGH | 8.1 | 8.5% | Jun 27, 2022 | The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing non... |
| CVE-2022-1572 | HIGH | 8.1 | 0.5% | Jun 27, 2022 | The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to a... |
| CVE-2022-2214 | HIGH | 8.8 | 1.0% | Jun 27, 2022 | A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by th... |
| CVE-2022-2212 | HIGH | 8.8 | 0.9% | Jun 27, 2022 | A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected ... |
| CVE-2022-33202 | HIGH | 8.1 | 0.4% | Jun 27, 2022 | Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Clou... |
| CVE-2022-2206 | HIGH | 7.8 | 1.4% | Jun 26, 2022 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-24893 | HIGH | 8.8 | 0.5% | Jun 25, 2022 | ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a ... |
| CVE-2022-33121 | HIGH | 8.1 | 0.4% | Jun 24, 2022 | A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clickin... |
| CVE-2022-22390 | HIGH | 7.5 | 0.9% | Jun 24, 2022 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure cause... |
| CVE-2022-20829 | HIGH | 7.2 | 3.2% | Jun 24, 2022 | A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those ima... |
| CVE-2022-20828 | HIGH | 7.2 | 39.9% | Jun 24, 2022 | A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module cou... |
| CVE-2022-2102 | HIGH | 7.5 | 0.8% | Jun 24, 2022 | Controls limiting uploads to certain file extensions may be bypassed. This could allow an attacker to intercept the init... |
| CVE-2022-28619 | HIGH | 7.8 | 0.2% | Jun 24, 2022 | A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The v... |
| CVE-2022-1746 | HIGH | 7.6 | 0.3% | Jun 24, 2022 | The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Syste... |
| CVE-2022-1667 | HIGH | 7.5 | 1.2% | Jun 24, 2022 | Client-side JavaScript controls may be bypassed by directly running a JS function to reboot the PLC (e.g., from the brow... |
| CVE-2022-32530 | HIGH | 7.8 | 0.4% | Jun 24, 2022 | A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, ... |
| CVE-2022-32143 | HIGH | 8.8 | 1.1% | Jun 24, 2022 | In multiple CODESYS products, file download and upload function allows access to internal files in the working directory... |
| CVE-2022-32142 | HIGH | 8.1 | 1.0% | Jun 24, 2022 | Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft ... |
| CVE-2022-32138 | HIGH | 8.8 | 1.1% | Jun 24, 2022 | In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, result... |
| CVE-2022-32137 | HIGH | 8.8 | 1.3% | Jun 24, 2022 | In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer ... |
| CVE-2022-31805 | HIGH | 7.5 | 1.0% | Jun 24, 2022 | In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication ... |
| CVE-2022-31804 | HIGH | 7.5 | 1.0% | Jun 24, 2022 | The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated ... |
| CVE-2022-1965 | HIGH | 8.1 | 1.0% | Jun 24, 2022 | Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, w... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now