2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34642 | MEDIUM | 5.5 | 0.2% | Jul 18, 2022 | The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect ma... |
| CVE-2022-34641 | MEDIUM | 5.5 | 0.3% | Jul 18, 2022 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b impl... |
| CVE-2022-34640 | MEDIUM | 5.5 | 0.2% | Jul 18, 2022 | The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorrect. |
| CVE-2022-34639 | MEDIUM | 5.5 | 0.2% | Jul 18, 2022 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect ... |
| CVE-2022-34637 | MEDIUM | 5.5 | 0.2% | Jul 18, 2022 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual addr... |
| CVE-2022-34636 | MEDIUM | 5.5 | 0.2% | Jul 18, 2022 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b impl... |
| CVE-2022-34634 | MEDIUM | 5.5 | 0.2% | Jul 18, 2022 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather c... |
| CVE-2022-34633 | MEDIUM | 5.5 | 0.2% | Jul 18, 2022 | CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions r... |
| CVE-2022-28681 | MEDIUM | 6.1 | 0.8% | Jul 18, 2022 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read... |
| CVE-2022-26118 | MEDIUM | 6.7 | 0.3% | Jul 18, 2022 | A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 ... |
| CVE-2022-23438 | MEDIUM | 6.1 | 0.5% | Jul 18, 2022 | An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in FortiO... |
| CVE-2022-22445 | MEDIUM | 6.5 | 0.6% | Jul 18, 2022 | An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise pa... |
| CVE-2022-2224 | MEDIUM | 4.3 | 0.3% | Jul 18, 2022 | The WordPress plugin Gallery for Social Photo is vulnerable to Cross-Site Request Forgery in versions up to, and includi... |
| CVE-2022-2223 | MEDIUM | 4.3 | 0.3% | Jul 18, 2022 | The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 d... |
| CVE-2022-2117 | MEDIUM | 5.3 | 0.9% | Jul 18, 2022 | The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20... |
| CVE-2022-2108 | MEDIUM | 5.3 | 0.7% | Jul 18, 2022 | The plugin Wbcom Designs – BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and rev... |
| CVE-2022-2101 | MEDIUM | 5.4 | 0.8% | Jul 18, 2022 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter... |
| CVE-2022-22304 | MEDIUM | 6.1 | 0.5% | Jul 18, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent fo... |
| CVE-2022-2400 | MEDIUM | 5.3 | 0.9% | Jul 18, 2022 | External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0. |
| CVE-2022-23142 | MEDIUM | 5.3 | 0.6% | Jul 18, 2022 | ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short ... |
| CVE-2022-30625 | MEDIUM | 5.3 | 0.3% | Jul 18, 2022 | Directory listing is a web server function that displays the directory contents when there is no index file in a specifi... |
| CVE-2022-30621 | MEDIUM | 6.5 | 0.6% | Jul 18, 2022 | Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS a... |
| CVE-2022-24692 | MEDIUM | 5.4 | 0.5% | Jul 18, 2022 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the general Parameters page ... |
| CVE-2022-24689 | MEDIUM | 5.3 | 0.8% | Jul 18, 2022 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote atta... |
| CVE-2022-31202 | MEDIUM | 6.5 | 1.2% | Jul 17, 2022 | The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via e... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now