2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1015 | MEDIUM | 6.6 | 1.5% | Apr 29, 2022 | A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows... |
| CVE-2022-0985 | MEDIUM | 4.3 | 0.5% | Apr 29, 2022 | Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without ha... |
| CVE-2022-1536 | MEDIUM | 5.4 | 0.6% | Apr 29, 2022 | A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Das... |
| CVE-2022-1530 | MEDIUM | 6.1 | 0.6% | Apr 29, 2022 | Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute m... |
| CVE-2022-1526 | MEDIUM | 5.4 | 0.6% | Apr 29, 2022 | A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST paramete... |
| CVE-2022-29907 | MEDIUM | 6.1 | 0.6% | Apr 29, 2022 | The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise l... |
| CVE-2022-29905 | MEDIUM | 4.3 | 0.4% | Apr 29, 2022 | The FanBoxes extension for MediaWiki through 1.37.2 (before 027ffb0b9d6fe0d823810cf03f5b562a212162d4) allows Special:Use... |
| CVE-2022-29903 | MEDIUM | 4.3 | 0.3% | Apr 29, 2022 | The Private Domains extension for MediaWiki through 1.37.2 (before 1ad65d4c1c199b375ea80988d99ab51ae068f766) allows CSRF... |
| CVE-2022-28477 | MEDIUM | 6.1 | 0.9% | Apr 28, 2022 | WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-28454 | MEDIUM | 6.1 | 1.1% | Apr 28, 2022 | Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-24898 | MEDIUM | 4.9 | 1.4% | Apr 28, 2022 | org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 a... |
| CVE-2022-29413 | MEDIUM | 6.1 | 0.4% | Apr 28, 2022 | Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 ... |
| CVE-2022-29412 | MEDIUM | 5.4 | 0.4% | Apr 28, 2022 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allow attackers ... |
| CVE-2022-29584 | MEDIUM | 5.4 | 0.5% | Apr 28, 2022 | Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets (CSS) cl... |
| CVE-2022-29415 | MEDIUM | 6.1 | 0.7% | Apr 28, 2022 | Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in Mati Skiba @ Rav Messer's Ravpage plugin <= 2.16 a... |
| CVE-2022-27860 | MEDIUM | 6.1 | 0.4% | Apr 28, 2022 | Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) in Shea Bunge's Footer Text plugin <= 2.0.3 on W... |
| CVE-2022-22443 | MEDIUM | 5.4 | 0.4% | Apr 28, 2022 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2022-22441 | MEDIUM | 6.5 | 0.8% | Apr 28, 2022 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users ... |
| CVE-2022-22427 | MEDIUM | 6.1 | 0.6% | Apr 28, 2022 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2022-22322 | MEDIUM | 5.4 | 0.4% | Apr 28, 2022 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2022-1514 | MEDIUM | 5.4 | 0.7% | Apr 28, 2022 | Stored XSS via upload plugin functionality in zip format in GitHub repository neorazorx/facturascripts prior to 2022.06.... |
| CVE-2022-28117 | MEDIUM | 4.9 | 21.9% | Apr 28, 2022 | A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the ap... |
| CVE-2022-1511 | MEDIUM | 6.5 | 1.0% | Apr 28, 2022 | Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4. |
| CVE-2022-28102 | MEDIUM | 5.4 | 0.5% | Apr 28, 2022 | A cross-site scripting (XSS) vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary w... |
| CVE-2022-24873 | MEDIUM | 6.1 | 0.7% | Apr 28, 2022 | Shopware is an open source e-commerce software platform. Prior to version 5.7.9, Shopware is vulnerable to non-stored cr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now