2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1803 | MEDIUM | 6.9 | 1.5% | May 20, 2022 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2. |
| CVE-2022-29434 | MEDIUM | 5.4 | 0.7% | May 20, 2022 | Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an... |
| CVE-2022-29432 | MEDIUM | 4.8 | 0.5% | May 20, 2022 | Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-... |
| CVE-2022-29431 | MEDIUM | 5.4 | 0.4% | May 20, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in KubiQ CPT base plugin <= 5.8 at WordPress allows an attacker to delet... |
| CVE-2022-29430 | MEDIUM | 6.1 | 0.3% | May 20, 2022 | Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery... |
| CVE-2022-29428 | MEDIUM | 4.8 | 0.5% | May 20, 2022 | Cross-Site Scripting (XSS) vulnerability in Muneeb's WP Slider Plugin <= 1.4.5 at WordPress. |
| CVE-2022-29426 | MEDIUM | 5.4 | 0.5% | May 20, 2022 | Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team'... |
| CVE-2022-29194 | MEDIUM | 5.5 | 0.3% | May 20, 2022 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem... |
| CVE-2022-29192 | MEDIUM | 5.5 | 0.3% | May 20, 2022 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem... |
| CVE-2022-29191 | MEDIUM | 5.5 | 0.4% | May 20, 2022 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem... |
| CVE-2022-29448 | MEDIUM | 4.9 | 1.0% | May 20, 2022 | Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin ... |
| CVE-2022-29425 | MEDIUM | 6.1 | 0.7% | May 20, 2022 | Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress... |
| CVE-2022-29424 | MEDIUM | 4.8 | 0.5% | May 20, 2022 | Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image ... |
| CVE-2022-29185 | MEDIUM | 4.4 | 0.8% | May 20, 2022 | totp-rs is a Rust library that permits the creation of 2FA authentification tokens per time-based one-time password (TOT... |
| CVE-2022-29183 | MEDIUM | 6.1 | 0.8% | May 20, 2022 | GoCD is a continuous delivery server. GoCD versions 20.2.0 until 21.4.0 are vulnerable to reflected cross-site scripting... |
| CVE-2022-29182 | MEDIUM | 5.4 | 0.8% | May 20, 2022 | GoCD is a continuous delivery server. GoCD versions 19.11.0 through 21.4.0 (inclusive) are vulnerable to a Document Obje... |
| CVE-2022-29177 | MEDIUM | 5.9 | 0.9% | May 20, 2022 | Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node,... |
| CVE-2022-22365 | MEDIUM | 5.9 | 0.6% | May 20, 2022 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, i... |
| CVE-2022-29163 | MEDIUM | 4.3 | 1.0% | May 20, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.... |
| CVE-2022-29159 | MEDIUM | 4.3 | 0.9% | May 20, 2022 | Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. In versions prior to 1.4.8, 1.5.6, an... |
| CVE-2022-24906 | MEDIUM | 4.3 | 1.0% | May 20, 2022 | Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. The full path of t... |
| CVE-2022-24905 | MEDIUM | 4.3 | 1.2% | May 20, 2022 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to ... |
| CVE-2022-24904 | MEDIUM | 4.3 | 1.1% | May 20, 2022 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior ... |
| CVE-2022-29883 | MEDIUM | 6.9 | 0.9% | May 20, 2022 | A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated a... |
| CVE-2022-29881 | MEDIUM | 6.9 | 1.0% | May 20, 2022 | A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected dev... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now