2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1137 | MEDIUM | 6.5 | 0.5% | Jul 23, 2022 | Inappropriate implementation in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a u... |
| CVE-2022-1132 | MEDIUM | 6.1 | 0.3% | Jul 23, 2022 | Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local at... |
| CVE-2022-1129 | MEDIUM | 6.5 | 0.7% | Jul 23, 2022 | Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote att... |
| CVE-2022-1128 | MEDIUM | 6.5 | 0.6% | Jul 23, 2022 | Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on ... |
| CVE-2022-34112 | MEDIUM | 6.5 | 0.5% | Jul 22, 2022 | An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstal... |
| CVE-2022-34853 | MEDIUM | 5.4 | 0.4% | Jul 22, 2022 | Multiple Authenticated (contributor or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in wpWax ... |
| CVE-2022-34650 | MEDIUM | 5.4 | 0.4% | Jul 22, 2022 | Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in wpWax Team... |
| CVE-2022-33191 | MEDIUM | 5.4 | 0.4% | Jul 22, 2022 | Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Chinmoy Paul's Testim... |
| CVE-2022-29495 | MEDIUM | 4.3 | 0.4% | Jul 22, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.11 at WordPress allows an attacke... |
| CVE-2022-2511 | MEDIUM | 6.1 | 0.4% | Jul 22, 2022 | Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to injec... |
| CVE-2022-2510 | MEDIUM | 6.1 | 0.4% | Jul 22, 2022 | Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to ... |
| CVE-2022-34520 | MEDIUM | 5.5 | 0.3% | Jul 22, 2022 | Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/b... |
| CVE-2022-34503 | MEDIUM | 6.5 | 0.7% | Jul 22, 2022 | QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerabilit... |
| CVE-2022-34502 | MEDIUM | 5.5 | 0.3% | Jul 22, 2022 | Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm... |
| CVE-2022-2470 | MEDIUM | 6.1 | 0.8% | Jul 22, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21. |
| CVE-2022-2142 | MEDIUM | 5.9 | 0.7% | Jul 22, 2022 | The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attac... |
| CVE-2022-2137 | MEDIUM | 4.9 | 0.7% | Jul 22, 2022 | The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an ... |
| CVE-2022-2136 | MEDIUM | 6.5 | 9.0% | Jul 22, 2022 | The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow... |
| CVE-2022-1655 | MEDIUM | 6.5 | 0.5% | Jul 22, 2022 | An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session... |
| CVE-2022-36131 | MEDIUM | 6.1 | 0.5% | Jul 22, 2022 | The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Tem... |
| CVE-2022-2495 | MEDIUM | 4.8 | 0.5% | Jul 22, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.21. |
| CVE-2022-2494 | MEDIUM | 5.4 | 0.5% | Jul 22, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0. |
| CVE-2022-20916 | MEDIUM | 6.1 | 0.5% | Jul 22, 2022 | A vulnerability in the web-based management interface of Cisco IoT Control Center could allow an unauthenticated, remote... |
| CVE-2022-20913 | MEDIUM | 6.5 | 0.9% | Jul 22, 2022 | A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an af... |
| CVE-2022-20909 | MEDIUM | 6.7 | 0.2% | Jul 22, 2022 | Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now